🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.sys.acorn.apps
Article #218

Re: Spam site -was: Hotmail

#218
From: Peter Smith
Date: Wed, 24 Jun 1998 00:00
43 lines
2931 bytes
In message <ant2414297a1t$G3@jim.ukonline.co.uk>
          Jim Nagel <jim.nagel@UKonline.co.uk.spamyourself> wrote:

> go to   http://www.econym.demon.co.uk/junkmail
> and download !Junkmail by Mike Williams.  drop a spam message
> (full headers showing) onto it and it analyses where it came from
> and generates a polite email telling the ISP they probably wouldn't
> condone such misuse of their system.  i've had several replies back
> saying the perpetrator had been disconnected. far fewer spams
> have been coming my way.

I've done that, but it's been done so it _appears_ to come from me, at least
as far as Junkmail is concerned, it _is_ from me. It's got me in the Return
Path, From and message IDs.

Here is the header.....

> Return-Path: <Giffy@ursaminr.demon.co.uk>
> Received: from saven.se (hal.saven.se [192.165.84.254])
> 	  by rly-zc04.mx.aol.com (8.8.5/8.8.5/AOL-4.0.0)
> 	  with ESMTP id MAA16649;
> 	  Fri, 19 Jun 1998 12:02:09 -0400 (EDT)
> From: Giffy@ursaminr.demon.co.uk
> Received: from Mailhub by saven.se id SAA15610; Fri, 19 Jun 1998 18:06:46 
> +0200 (DFT)
> Date: Fri, 19 Jun 1998 18:06:46 +0200 (DFT)
> Message-Id: <989.283923.880741 Giffy@ursaminr.demon.co.uk>
> Subject: New Friends! FREE Photo Scans!
> Mime-Version: 1.0
> Content-Type: text/plain; charset="us-ascii"
> Content-Transfer-Encoding: 7bit

The only thing that _doesn't_ point to me is the date, being +2, rather than
+1 (although this means nothing), and the Received line implies that it came
from (or at least via) AOL. Oh yes, and his postal address ;-)

Peter

-- 
To reply by mail, change .com to .co in my email address
54 things to do in a lift....
 16. Do Tai Chi exercises.
Technical Details
Message-ID: <485B54630E%polaris@ursaminr.demon.com.uk>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <ant2207380b0CRhM@xsell.demon.co.uk> <898531419.766512@BITS.bris.ac.uk> <na.be5153485a.a40040rodean@argonet.co.uk> <n5A5D178E.amj-sys@localhost> <485A646FA3%polaris@ursaminr.demon.com.uk> <3ae7bd5a48%tim@worthy.demon.co.uk> <ant2414297a1t$G3@jim.ukonline.co.uk>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 114044,54d3695880ab62a9
X-Google-Attributes: gid114044,public
X-Google-Thread: 113320,3ff2a9fd2af5fc7b
X-Google-Attributes: gid113320,public
From: Peter Smith <polaris@ursaminr.demon.com.uk>
Subject: Re: Spam site -was: Hotmail
Date: 1998/06/24
Message-ID: <485B54630E%polaris@ursaminr.demon.com.uk>
X-Deja-AN: 365764688
X-NNTP-Posting-Host: ursaminr.demon.co.uk:194.222.56.157
Sender: Peter Smith <polaris@ursaminr.demon.com.uk>
References: <ant2207380b0CRhM@xsell.demon.co.uk> <898531419.766512@BITS.bris.ac.uk> <na.be5153485a.a40040rodean@argonet.co.uk>  <n5A5D178E.amj-sys@localhost> <485A646FA3%polaris@ursaminr.demon.com.uk> <3ae7bd5a48%tim@worthy.demon.co.uk> <ant2414297a1t$G3@jim.ukonline.co.uk>
X-Posting-Agent: RISC OS Newsbase 0.61
X-Apparently-From: polaris@ursaminr.demon.co.uk
X-Editor: Zap, using ZapEmail 0.21beta
X-NNTP-Poster: NewsHound v1.33
X-Complaints-To: abuse@demon.net
X-Trace: news.demon.co.uk 898721796 nnrp-11:5305 NO-IDENT ursaminr.demon.co.uk:194.222.56.157
Organization: None!
X-Mangled: using ZapEmail's AST (ygolonhceT mapS-itnA)
Newsgroups: comp.sys.acorn.apps,demon.ip.support.archimedes