From owner-freebsd-questions Mon Aug 19 2: 9:58 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5847737B400 for ; Mon, 19 Aug 2002 02:09:54 -0700 (PDT) Received: from wantadilla.lemis.com (wantadilla.lemis.com [192.109.197.80]) by mx1.FreeBSD.org (Postfix) with ESMTP id DAF9343E6A for ; Mon, 19 Aug 2002 02:09:52 -0700 (PDT) (envelope-from grog@lemis.com) Received: by wantadilla.lemis.com (Postfix, from userid 1004) id A982E81679; Mon, 19 Aug 2002 18:39:50 +0930 (CST) Date: Mon, 19 Aug 2002 18:39:50 +0930 From: moeller@chemie.uni-hamburg.de To: Martin Moeller Cc: FreeBSD Questions , Maike Moeller Subject: Re: I get mail from my own address! Message-ID: <20020819090950.GD64687@wantadilla.lemis.com> References: <20020819105902.GA39997@piranha.bsdsi.com> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20020819105902.GA39997@piranha.bsdsi.com> User-Agent: Mutt/1.3.99i Really-From: Greg 'groggy' Lehey Organization: The FreeBSD Project Phone: +61-8-8388-8286 Fax: +61-8-8388-8725 Mobile: +61-418-838-708 WWW-Home-Page: http://www.FreeBSD.org/ X-PGP-Fingerprint: 9A1B 8202 BCCE B846 F92F 09AC 22E6 F290 507A 4223 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Monday, 19 August 2002 at 10:59:02 +0000, Martin Moeller wrote: > > Hello list, > > Yesterday I received a spam mail from my own email address. I assume that is > a trick to pass through my procmail system or something? > > The header of the mail only shows this: > > > -------- Ursprüngliche Nachricht -------- > Betreff: Mother finds 71K in 15 year olds closet > Datum: Sun, 18 Aug 2002 19:22:09 -0500 > Von: moeller@chemie.uni-hamburg.de > Rückantwort: moeller@chemie.uni-hamburg.de > An: moeller@chemie.uni-hamburg.de > > > > This email was sent to you via Saf-E Mail Systems. Your email address was > automatically inserted into the To and From addresses to eliminate > undeliverables which waste bandwidth and cause internet congestion. Your > email or webserver IS NOT being used for the sending of this mail. No-one > else is receiving emails from your address. You may utilize the removal link > below if you do not wish to receive this > mailing.http://www.andromeda-cr.com/remove.html Hmm, come to think of it, this isn't the normal kind of spam. I haven't seen this particular thing before. What else was in the message? > What is that all about? How do they do that? Oh, that's easy. Just change the headers, like I've done here. I've also added an (undefined) Really-from: header: Really-From: Greg 'groggy' Lehey Your MUA should show you that if you ask for all headers. > And how can they (legally) be stopped from using my address? I don't > really trust those removal links...... Don't use the removal links. Ignore them. The laws are still pretty unclear, but in this case they've at least told you they're doing it. If you follow http://www.lemis.com/lemisspam.html, you'll see that most of it is malicious. Greg -- When replying to this message, please copy the original recipients. If you don't, I may ignore the reply or reply to the original recipients. For more information, see http://www.lemis.com/questions.html See complete headers for address and phone numbers To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message