I kinda enjoy unravelling SPAM headers and then using the "host"
and "traceroute" commands so that I can send complaints to the
sources and the servers feeding the sources. (I maintain little
template posts for this purpose) I receive about one or two
SPAM's a week and become active about when the rate rises above
3 a week.
Anyway, my question:
I have noticed that almost all SPAM headers have the "From:"
header ahead of a couple of "Received:" headers. A recent
example is shown below.
Anybody know why SPAM has this odd idiosyncrasy?
> Received: from brainy1.ie-eg.com (brainy1.ie-eg.com
> [194.79.96.40]) by clic1.qbc.clic.net (8.7.6/8.7.3)
> with SMTP id CAA25990 for <kelias@clic.net>; Sat, 4
> Oct 1997 02:36:58 -0400 (EDT)
> From: 14436961@03606.com
> Received: from [207.247.109.115] by brainy1.ie-eg.com;
> (5.65v3.2/1.1.8.2/24Aug96-0523PM) id AA19936; Sat, 4
> Oct 1997 08:23:36 +0200
> Received: from mail.fish.net(smtp.fish.net(207.222.190.247)) by
> fish.net (8.8.5/8.6.5) with SMTP id GAA00748 for
> <mailmaster@fish.net>; Fri, 03 Oct 1997 19:38:53 -0600
> (EST)
> Date: Fri, 03 Oct 97 19:38:53 EST
> To: mailmaster@fish.net
> Subject: Hi from Young N' Lusty
> Message-Id: <6730057729034.43209@fish.net>
> Reply-To: mailmaster@fish.net
> X-Pmflags: 34078848 0
> X-Uidl: 1834e532395abb83946c924b47abc32f
> Comments: Authenticated sender is <mailmaster@fish.net>
> Status: R
> Lines: 11
> X-Status: R
>
> Notice:
>
> This is an adult site. Access is limited to persons over 18.
> If you are offended by things of a sexual nature, DO NOT ENTER!!!!
>
> But...If you want to find the youngest, hottest girls on the 'Net visit -
>
> http://www.youngnlusty.com
>
> Be sure to come soon!!! We're waiting!!!!!!!!
Bye.
-- Friar Broccoli Robert Keith Elias (Quebec, Qc, Canada) Address: kelias@CLIC.NET Best programmer's & all purpose text editor: http://www.semware.com--------- I consider ALL arguments in support of my views ---------