Article View: ch.admin
Article #15295Re: SPAMs mit Absender XXXXXXX@theol.unizh.ch
From: Michael Hottinger
Date: Wed, 20 Sep 2000 00:00
Date: Wed, 20 Sep 2000 00:00
125 lines
5973 bytes
5973 bytes
Felix Rauch <felix@nice.usergroup.ethz.ch> wrote:
> Es waere interessant, das abzuklaeren. Aber ich vermute mal, dass so
> ein Vorgehen nur Aussicht auf Erfolgt haette, wenn der Spam-Absender
> in der Schweiz (oder evtl. auch im angrenzenden Ausland) waere. Um das
> zu wissen muesste man aber mal den Spam bzw. dessen Header sehen.
Ich habe nachfolgend fuer die Interessierten weitere Headers,
welche ich einigen, bei mir herumliegenden Beschwerden entnommen habe.
Sachdienliche Hinweise zur Verfolgung des Spammers werden gerne entgegen-
genommen.
Gruesse, Michael Hottinger
Und hier die versprochenen Headers:
SPAM 1:
Received: from sd.znet.com (sd.znet.com [207.167.64.5])
by mx3.znet.com (8.11.0/8.11.0/jjb-mx3) with ESMTP id e8INjcS07447
for <spam@mx3.znet.com>; Mon, 18 Sep 2000 16:45:39 -0700 (PDT)
Received: (from root@localhost)
by sd.znet.com (8.11.0/8.11.0/jjb-sd) id e8INjaG29713;
Mon, 18 Sep 2000 16:45:36 -0700 (PDT)
Message-Id: <200009182345.e8INjWT29693@sd.znet.com>
X-Envelope-From: monday6700@theol.unizh.ch
X-Envelope-To: <sharnlee@sd.znet.com>
Received: from sdn-ar-002casjosP078.dialsprint.net ([158.252.197.166]) by
cmar-06.cmar.navy.mil
via smtpd (for cmar-03.cmar.navy.mil [172.16.2.2]) with SMTP; 18
Sep 2000 23:44:34 UT
DATE: 18 Sep 00 4:46:07 PM
FROM: monday6700@theol.unizh.ch
Reply-to: monday6700@theol.unizh.ch
TO: monday6700@theol.unizh.ch
SUBJECT: #$Let Mass E-Mail Work 4 U!-Get 1 Free Million-$$$$%%%%%%$$$%
SPAM 2:
Received: from sd.znet.com (sd.znet.com [207.167.64.5])
by mx3.znet.com (8.11.0/8.11.0/jjb-mx3) with ESMTP id e8J3bL512765
for <spam@mx3.znet.com>; Mon, 18 Sep 2000 20:37:22 -0700 (PDT)
Received: (from root@localhost)
by sd.znet.com (8.11.0/8.11.0/jjb-sd) id e8J3bKB08130;
Mon, 18 Sep 2000 20:37:20 -0700 (PDT)
Message-Id: <200009190337.e8J3bI208115@sd.znet.com>
X-Envelope-From: monday6700@theol.unizh.ch
X-Envelope-To: <startech@sd.znet.com>
Received: from sdn-ar-001casjosP309.dialsprint.net ([158.252.196.47]) by
cmar-06.cmar.navy.mil
via smtpd (for cmar-03.cmar.navy.mil [172.16.2.2]) with SMTP; 19
Sep 2000 03:35:06 UT
DATE: 18 Sep 00 8:36:34 PM
FROM: monday6700@theol.unizh.ch
Reply-to: monday6700@theol.unizh.ch
TO: monday6700@theol.unizh.ch
SUBJECT: #$Let Mass E-Mail Work 4 U!-Get 1 Free Million-END OF SUMMER
SPECIAL
SPAM 3:
From monday6700@theol.unizh.ch Tue Sep 19 10:33 HKT 2000
Received: from ns.sanbernardino.net ns.sanbernardino.net 206.55.157.2
by eng.ie.cuhk.edu.hk 8.9.1/8.9.1 with SMTP id KAA12492
for our_user@ie.cuhk.hk Tue, 19 Sep 2000 10:33:46 +0800 HKT
From: monday6700@theol.unizh.ch
Message-Id: 200009190233.KAA12492@eng.ie.cuhk.edu.hk
Received: qmail 7794 invoked from network 18 Sep 2000 23:22:08 -0000
Received: from sdn-ar-002casjosp078.dialsprint.net HELO 5P0471983?
158.252.197.166
by www.sanbernardino.net with SMTP 18 Sep 2000 23:22:08 -0000
DATE: 18 Sep 00 5:13:54 PM
Reply-to: monday6700@theol.unizh.ch
TO: monday6700@theol.unizh.ch
SUBJECT: #$Let Mass E-Mail Work 4 U!-Get 1 Free Million--Get Exposed!!!!!!
Content-Type: text
Content-Length: 1387
Status: OR
SPAM 4:
Received: from smv12.iname.net [165.251.8.211] by tarlowe.com
(SMTPD32-5.05) id A912A43C00E2; Mon, 18 Sep 2000 20:53:38 -0400
Return-Path: <monday6700@theol.unizh.ch>
Received: from nova.dreamscape.com (nova.dreamscape.com
[206.64.128.8])
by smv12.iname.net (8.9.3/8.9.1SMV2) with ESMTP id VAA11571
for <singleguy@mindless.com> sent by <monday6700@theol.unizh.ch>;
Mon, 18 Sep 2000 21:04:17 -0400 (EDT)
From: monday6700@theol.unizh.ch
Received: from spnotes.solvaypaperboard.com (solvaypaperboard.com
[206.64.128.55])
by nova.dreamscape.com (8.8.5/8.8.4) with SMTP
id VAA08168; Mon, 18 Sep 2000 21:01:49 -0400 (EDT)
Message-Id: <200009190101.VAA08168@nova.dreamscape.com>
X-Dreamscape-Track-NOVA-A: solvaypaperboard.com [206.64.128.55]
X-Dreamscape-Track-NOVA-B: Mon, 18 Sep 2000 21:01:49 -0400 (EDT)
Received: from 2tgPup8kK ([158.252.197.166]) by
spnotes.solvaypaperboard.com (Lotus SMTP MTA v4.6.4 (830.2
3-23-1999)) with SMTP id 8525695F.0003EF79; Mon, 18 Sep 2000
20:43:09 -0400
DATE: 18 Sep 00 5:48:09 PM
Reply-to: monday6700@theol.unizh.ch
TO: monday6700@theol.unizh.ch
SUBJECT: #$Let Mass E-Mail Work 4 U!-Get 1 Free
Million-$$$$%%%%%%$$$%
X-RCPT-TO: <jason@tarlowe.com>
SPAM 5:
Return-Path: <monday6700@theol.unizh.ch>
Received: (qmail 94192 invoked from network); 18 Sep 2000 23:19:24 -0000
Received: from cdh.com (HELO cdhex.cdh.com) (206.6.49.2)
by helios.zvw.uni-goettingen.de with SMTP; 18 Sep 2000 23:19:24 -0000
Received: by cdhex.cdh.com with Internet Mail Service (5.5.2650.21)
id <S0BB6WQA>; Mon, 18 Sep 2000 19:18:49 -0400
Received: from xCljFEa06 (sdn-ar-002casjosP078.dialsprint.net
[158.252.197.166]) by cdhex.cdh.com with SMTP (Microsoft Exchange Internet
Mail Service Version 5.5.2650.21)
id S0BB6WP9; Mon, 18 Sep 2000 19:18:41 -0400
From: monday6700@theol.unizh.ch
Reply-To: monday6700@theol.unizh.ch
To: monday6700@theol.unizh.ch
DATE: 18 Sep 00 4:20:05 PM
SUBJECT: #$Let Mass E-Mail Work 4 U!-Get 1 Free Million--Get Exposed!!!!!!
Technical Details
Message-ID:
<39c8a75a@rzunews1.unizh.ch>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<39c87c71@rzunews1.unizh.ch> <x22ya0n9xpz.fsf@rif23.iiic.ethz.ch> <39c89700@core.inf.ethz.ch>Show Full Headers
Complete Article Headers
X-Google-Language: GERMAN,ASCII-7-bit
X-Google-Thread: 11008d,63ec97ddcac13a46
X-Google-Attributes: gid11008d,public
From: Michael Hottinger <hotting@theol.unizh.ch>
Subject: Re: SPAMs mit Absender XXXXXXX@theol.unizh.ch
Date: 2000/09/20
Message-ID: <39c8a75a@rzunews1.unizh.ch>
X-Deja-AN: 672004064
Sender: Michael Hottinger <hotting@teolinux.unizh.ch>
References: <39c87c71@rzunews1.unizh.ch> <x22ya0n9xpz.fsf@rif23.iiic.ethz.ch> <39c89700@core.inf.ethz.ch>
X-Original-NNTP-Posting-Host: teolinux.unizh.ch
X-Trace: 20 Sep 2000 14:02:34 +0100, teolinux.unizh.ch
Organization: University of Zurich
User-Agent: tin/pre-1.4-19990805 ("Preacher Man") (UNIX) (Linux/2.2.13 (i586))
Newsgroups: ch.admin