I received a spam with the header below.

Return-Path: <[EMAIL PROTECTED]>
Received: from biocontrolsys.com ([66.50.175.12])
        by gateway.biocontrolsys.com (8.12.6/8.12.6) with ESMTP id
hA4G6EXp016886
        for <[EMAIL PROTECTED]>; Tue, 4 Nov 2003 08:06:16 -0800
Received: from mike [66.50.175.12] by biocontrolsys.com with eSMTP; 
        Tue, 4 Nov 2003 12:08:18 -0400
Message-ID: <[EMAIL PROTECTED]>
From: "jenna henny" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Your harddrive is storing harmful EVIDENCE!
Date: Tue, 4 Nov 2003 12:08:18 -0400
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
X-Priority: 3
X-Mailer: PHP
X-Scanned-By: MIMEDefang 2.31 (www . roaringpenguin . com / mimedefang)
X-UIDL: Y4R"!ej4!!O%Y!!ih^"!

It didn't get marked as spam since it appears to come from us, though the IP
address is located in Puerto Rico.  I was just wondering how they get
biocontrolsys.com associated with their IP address.  Is it a completely
manufactured (not "real") header?  Can you create a test for this?

Thanks,
Matt

Network Administrator
BioControl Systems, Inc.
Bellevue, WA  USA



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to