Re: [cobalt-users] LIST POLICE TAKE NOTICE <Off Topic>Virus(spam)</Off Topic>

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

Kevin D wrote:

> I did some checking on the spam's I've been receiving from this email
> address. It appears that the mail headers are forged, and that each piece of
> spam originates from seemingly a different IP address. So, I looked up the
> message ID in the header and searched my mail log and viola... the spam was
> relayed to my server from 148.233.138.198 (customer138-198.telmex.net.mx).
> Can anyone else confirm this finding, or could this log entry be forged as
> well?

The only "Received:" header you can believe is the one your server
added.  Any or all of the rest could be spoofed/forged.

Some of us are better than others at tracking down the "right" one;
there's a website somewhere (sorry, I don't remember where) with an
address you can send spam to, and they'll figure out where the spam
report should go, and send it.

Jeff
-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
nobaloney.net
P. O. Box 52672
Riverside, CA  92517
voice: (909) 787-8589  *  fax: (909) 782-0205