Re: OT: Inundated with bogus(?) warnings I'm infected

On Wed, 2006-09-13 at 05:33 -0500, Mike McCarty wrote:
Would someone please help me in interpreting the headers
from these messages so I can ascertain where they originate,

Take a look at the headers, as a message goes through a mail server, it
adds its address above the last one. So the one closest to the bottom
is the originator.

However, be aware that a spammer may well send through a few servers
before leaving out for the wide world. You can end up making a report
directly to a spammer.

--
(Currently running FC4, occasionally trying FC5.)

Don't send private replies to my address, the mailbox is ignored.
I read messages from the public lists.

--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

Relevant Pages

  • RE: OT - has my email domain been hijacked?
    ... > The dumb mail server of some of the recipients hasn't worked out that the ... > headers are forged, so it is returning the 'unknown address error' back to ... that is accepting mail from the spammer. ... of the bounced message, should prompt warnings to or disconnection ...
    (Fedora)
  • Re: OT: Inundated with bogus(?) warnings Im infected
    ... from these messages so I can ascertain where they originate, ... Take a look at the headers, as a message goes through a mail server, it ... You can end up making a report ... reporting to the ISP of the spammer should be effective. ...
    (Fedora)
  • Cosmicharlie: Spammer or infected?
    ... It looks like Chuckles is likely either a spammer or has a virus or ... "The Project Honey Pot system has detected behavior ... from the IP address consistent with that of a mail server. ... owned by a spammer. ...
    (rec.windsurfing)
  • Chuckles: Spammer or infected?
    ... "The Project Honey Pot system has detected behavior ... from the IP address consistent with that of a mail server. ... owned by a spammer. ...
    (rec.windsurfing)
  • RE: Log to find Internal Originator
    ... You could contact the real user who received the ... and verify whether the mail is sent by him. ... is caused by Reverse NDR attack by spammer. ... Spammer telnet any third party Mail Server by port 25, ...
    (microsoft.public.exchange.admin)