[cobalt-users] FW: very, very wierd email any suggestions?

["L. James Prevo" <president@xxxxxxxxx>]

I found the problem, one of my customes was send SPAM
through cgi-bin sendmail.  People like this are going
to force host to cut ALL email off in the future

Their site is now history.

I would still like to know what the message was to
determine if they broke any of our other AUP's

Thanks,
L. James Prevo
President
The Prevo Network
http://www.prevo.net
"The Place Where We Unlock Your Doors to the Net!"


> -----Original Message-----
> From: L. James Prevo [mailto:president@xxxxxxxxx]
> Sent: Saturday, December 30, 2000 7:52 PM
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: very, very wierd email any suggestions?
> 
> 
> 
> I received a very weird bounce email to my admin email today
> 
> I am lost on this one.
> 
> It looks as if my cobalt server was trying to send a email
> 
> Could someone please help, thanks.
> 
> ###Here is the error I received...
> 
> The original message was received at Sat, 30 Dec 2000 19:31:14 -0500
> from admin@localhost
> 
>    ----- The following addresses had permanent fatal errors -----
> e-m@xxxxxx
> 
>    ----- Transcript of session follows -----
> ... while talking to custmx.netvision.net.il.:
> >>> RCPT To:<e-m@xxxxxx>
> <<< 550 <e-m@xxxxxx>... User unknown
> 550 e-m@xxxxxxxxx User unknown
> 
> ###Here is the header of the bounce email that was sent...
> 
> Return-Path: <MAILER-DAEMON>
> Received: from localhost (localhost)
> 	by ns.prevo.net (8.9.3/8.9.3) with internal id TAA26443;
> 	Sat, 30 Dec 2000 19:31:19 -0500
> Date: Sat, 30 Dec 2000 19:31:19 -0500
> From: Mail Delivery Subsystem <MAILER-DAEMON@xxxxxxxxxxxx>
> Message-Id: <200012310031.TAA26443@xxxxxxxxxxxx>
> To: admin@xxxxxxxxxxxx
> MIME-Version: 1.0
> Content-Type: multipart/report; report-type=delivery-status;
> 	boundary="TAA26443.978222679/ns.prevo.net"
> Subject: Returned mail: User unknown
> Auto-Submitted: auto-generated (failure)
> X-UIDL: %Sg"!"&7!!]/]"!>4C"!
> 
> 
> ###Here is the header of the original email that was sent...
> 
> Return-Path: <admin>
> Received: (from admin@localhost)
> 	by ns.prevo.net (8.9.3/8.9.3) id TAA26441
> 	for e-m@xxxxxx; Sat, 30 Dec 2000 19:31:14 -0500
> Date: Sat, 30 Dec 2000 19:31:14 -0500
> Message-Id: <200012310031.TAA26441@xxxxxxxxxxxx>
> From: Coredump <someone@xxxxxxxxxxxxx>
> To: Coredump <e-m@xxxxxx>
> Cc: 
> Subject: win 75 gulden
> 
> ###Here is the email...
> 
> **WARNING, I DO NOT KNOW WHAT IT SAYS**  If someone could
> translate this and let me know what info was being sent
> 
> GO! = GO!
> 
> wat je moet doen = Als je nu 75 gulden wilt verdienen moet je de 
> site van Coredump goed bekijken. Haal alle informatie eruit en 
> zorg dat je het na kunt vertellen aan potentiele klanten. Als een 
> klant daadwerkelijk een start-up pakket koopt bij Coredump, 
> ontvang je 75 gulden mits je kan aantonen dat je de klanten 
> geleverd hebt! Verzorg je een restyle pakket, dan ontvang je 40 
> gulden!!....
> 
> 
> Thanks,
> L. James Prevo
> President
> The Prevo Network
> http://www.prevo.net
> "The Place Where We Unlock Your Doors to the Net!"
>