Re: [cobalt-users] SPAM ATTACK

["ISEE Multimedia" <mail@xxxxxxxxxxxxxxxxxxx>]

> > >
> > >Ive just had 500 messages returned to me. which i obviously 
> > didnt send.
> > >
> > >How do i find out if they were sent from the server, or someone just 
> > >put my address in as the sender?
> > 
> > 
> > read the headers
> > 
> 
> Only if they bounce the original spam back. AOL is good for that.
> If the bounce has the original message send time, do:
> 
> grep 10:37 /var/log/maillog
> 
> Where 10:37 was the time of the original message allegedly coming from
> your server.
> 

Hi Dan

Found one with the original mail and this is the header

In this it says Received: from isee-multimedia.com (unknown [203.251.62.8])

The IP isnt mine so is it safe to say that this didnt originate from me?

Received: from v3.rz.uni-leipzig.de (v3.rz.uni-leipzig.de [139.18.1.28])
 by server1.rz.uni-leipzig.de (Postfix) with ESMTP
 id 6ED6418; Fri,  1 Aug 2003 03:22:20 +0200 (METDST)
Received: from localhost (localhost [127.0.0.1])
 by v3.rz.uni-leipzig.de (Postfix) with ESMTP
 id 4EE71C0C; Fri,  1 Aug 2003 03:22:20 +0200 (CEST)
Received: from v3.rz.uni-leipzig.de ([127.0.0.1])
 by localhost (v3 [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
 id 09103-09; Fri,  1 Aug 2003 03:22:19 +0200 (CEST)
Received: from isee-multimedia.com (unknown [203.251.62.8])
 by v3.rz.uni-leipzig.de (Postfix) with SMTP
 id C2480C0B; Fri,  1 Aug 2003 03:22:08 +0200 (CEST)
From: adah <adah@xxxxxxxxxxxxxxxxxxx>
To: <ignacio@xxxxxxxxxxxxxxxxxxxxx>
Subject: Let's fix your problems
Date: Thu, 31 Jul 2003 20:28:35 -0500
Mime-Version: 1.0
Content-Type: text/html
X-Mailer: AOL 7.0 for Windows US sub 118
Message-Id: <20030801012208.C2480C0B@xxxxxxxxxxxxxxxxxxxx>
X-Virus-Scanned: by amavisd-new at v3-ul