These spam messages are coming from someone hosted by chinanet, chinanet.cn.net using the ip address of 61.129.81.52, which searching google is a commonly used IP address for spam mailings. In fact this same message is being sent with a variety of forged from/return-path addresses. However as far as I can tell, all of the other forged addresses are fake MSN or Yahoo addresses, not actual independent companies. Does any one know of any good resources on the net to bring to our legal department/managers on this issue, especially since this is from a large, known spam source that is well outside of US jurisdiction?
Thanks, Andrew > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of dman > Sent: Friday, May 03, 2002 10:47 AM > To: Spamassassin List > Subject: Re: [SAtalk] [OT] Help - someone is using our company domain > name as the from address in spam > > > On Fri, May 03, 2002 at 09:52:39AM -0600, Andrew Hoying wrote: > | I'm getting flooded with messages from postmaster accounts > about spam coming > | from us. When you look at the header it is obviously coming > from Asia, but > | they are using our company domain name in the from and return-path > | addresses. The spam is even about equities, we deal in commodities and > | equity trading, so it is doubly abusive to our corporate image. > My question > | is, what can I do to stop this, and how do I go about finding who is the > | source of the spam? > > 1) educate those postmasters regarding Received: headers > (so that they know the spam didn't come from your systems at all) > > 2) inspect the Received: headers yourself and > > a) add those machines to RBLs > > b) present the people (eg postmasters) responsible with the > penalty for their actions > (have the legal dept. begin a lawsuit for damaging your > company name) > > HTH, > -D > > -- > > If we claim we have not sinned, we make Him out to be a liar and His > Word has no place in our lives. > I John 1:10 > > GnuPG key : http://dman.ddts.net/~dman/public_key.gpg > > _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
