SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Mon, 22 Mar 2004 10:05:20 PST8
From:	Peter Skye <pskye@peterskye.com >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: Re: NetSky(e) Virus ?

Content Type: text/plain

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

J. R. Fox wrote:
>
> Ask and ye shall receive.

Aha, the header tells the tale.

First, the Received and Message-Id lines show that
the message originated on the SCOUG server:

> Received: from scoug.com (scoug.com [216.184.211.35])
> by vmj-ext.prodigy.net (8.12.10/8.12.10) with SMTP id i2HNIA53072656;
> Wed, 17 Mar 2004 18:18:12 -0500
> Received: from www (scoug.com [216.184.211.35] ) by scoug.com
> (Hethmon Brothers Smtpd) ; Wed, 17 Mar 2004 15:12:21 -0700
> Received: from scoug.com ([209.178.212.67] [209.178.212.67] ) by scoug.com
> (Hethmon Brothers Smtpd) ; Wed, 17 Mar 2004 15:12:17 -0700
> Message-Id: <200403171512.1714274.7@scoug.com>

If the message had come from me, the Message-Id line would be
@verizon.net. (If it came from you, it would be @pacbell.net.)

The From line contains my email address:

> From: pskye@peterskye.com

but that's not my "signature" -- a message from me will instead say

From: Peter Skye

Also, the content of the message is an attachment which is a virus.

Who sent the message? Well, the Received lines tell us that too.
It was sent by 209.178.212.67 (which is _not_ scoug.com) and
received by 216.184.211.35 (which _is_ scoug.com -- try
NSLOOKUP 216.184.211.35 and you'll see).

Who is 209.178.212.67? The spammer!

- Peter

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 22 | March | 2004 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.