🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.sys.acorn.apps
Article #220

Re: Spam site -was: Hotmail

#220
From: Peter Smith
Date: Wed, 24 Jun 1998 00:00
47 lines
2861 bytes
In message <ant242152b49MRUA@zedtoo.demon.co.uk>
          Stuart Painting <stuart@zedtoo.demon.co.uk> wrote:

> In article <485B54630E%polaris@ursaminr.demon.com.uk>, Peter Smith
> <URL:mailto:polaris@ursaminr.demon.com.uk> wrote:
> > 
> > I've done that, but it's been done so it _appears_ to come from me, at
> > least as far as Junkmail is concerned, it _is_ from me. It's got me in
> > the Return Path, From and message IDs.
> > 
> > Here is the header.....
> > 
> > > Return-Path: <Giffy@ursaminr.demon.co.uk>
> > > Received: from saven.se (hal.saven.se [192.165.84.254])
> > > 	  by rly-zc04.mx.aol.com (8.8.5/8.8.5/AOL-4.0.0)
> > > 	  with ESMTP id MAA16649;
> > > 	  Fri, 19 Jun 1998 12:02:09 -0400 (EDT)
> > > From: Giffy@ursaminr.demon.co.uk
> > > Received: from Mailhub by saven.se id SAA15610; Fri, 19 Jun 1998
> > > 18:06:46  +0200 (DFT)
> 
> Hold on... are you saying that !JunkMail identified *you* as the
> real sending site? 

It certainly did Ollie!

It gave no indication of any work though - the description window was blank.

> Are you sure it didn't mention "saven.se" (which from those headers looks
> mighty suspicious...)
> 

Yep.

> I am assuming that the *recipient* was an AOL customer.
> 

Sort of. It was _most_ of the AOL customers :-O Each spam went out with 3 to
5 addresses. Many of these were invalid, so they were bounced back to me :-(

Peter

-- 
To reply by mail, change .com to .co in my email address
54 things to do in a lift....
 1. Make race car noises when anyone gets on or off.
Technical Details
Message-ID: <485B6A5B17%polaris@ursaminr.demon.com.uk>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <ant2207380b0CRhM@xsell.demon.co.uk> <898531419.766512@BITS.bris.ac.uk> <na.be5153485a.a40040rodean@argonet.co.uk> <n5A5D178E.amj-sys@localhost> <485A646FA3%polaris@ursaminr.demon.com.uk> <3ae7bd5a48%tim@worthy.demon.co.uk> <ant2414297a1t$G3@jim.ukonline.co.uk> <485B54630E%polaris@ursaminr.demon.com.uk> <ant242152b49MRUA@zedtoo.demon.co.uk>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 114044,54d3695880ab62a9
X-Google-Attributes: gid114044,public
X-Google-Thread: 113320,3ff2a9fd2af5fc7b
X-Google-Attributes: gid113320,public
From: Peter Smith <polaris@ursaminr.demon.com.uk>
Subject: Re: Spam site -was: Hotmail
Date: 1998/06/24
Message-ID: <485B6A5B17%polaris@ursaminr.demon.com.uk>
X-Deja-AN: 365913408
X-NNTP-Posting-Host: ursaminr.demon.co.uk:194.222.56.157
Sender: Peter Smith <polaris@ursaminr.demon.com.uk>
References: <ant2207380b0CRhM@xsell.demon.co.uk> <898531419.766512@BITS.bris.ac.uk> <na.be5153485a.a40040rodean@argonet.co.uk>  <n5A5D178E.amj-sys@localhost> <485A646FA3%polaris@ursaminr.demon.com.uk> <3ae7bd5a48%tim@worthy.demon.co.uk> <ant2414297a1t$G3@jim.ukonline.co.uk>  <485B54630E%polaris@ursaminr.demon.com.uk> <ant242152b49MRUA@zedtoo.demon.co.uk>
X-Posting-Agent: RISC OS Newsbase 0.61
X-Apparently-From: polaris@ursaminr.demon.co.uk
X-Editor: Zap, using ZapEmail 0.21beta
X-NNTP-Poster: NewsHound v1.33
X-Complaints-To: abuse@demon.net
X-Trace: news.demon.co.uk 898764129 nnrp-11:18303 NO-IDENT ursaminr.demon.co.uk:194.222.56.157
Organization: None!
X-Mangled: using ZapEmail's AST (ygolonhceT mapS-itnA)
Newsgroups: comp.sys.acorn.apps,demon.ip.support.archimedes