It appears we have a spammer harvesting addresses from the LSTOWN-L list. There is no other likely explanation for spam sent to [log in to unmask] with [log in to unmask] on the 'To:' line. To the best of my knowledge, the LSTOWN-L list archives are the only place you will find both of those addresses. > Return-Path: <[log in to unmask]> > Received: from localhost by franklin with LMTP for <[log in to unmask]>; > Mon, 28 Jun 2004 07:58:03 -0500 > Received: from osgood.cc.nd.edu with LMTP by franklin > (2.0.4/sieved-2-0-build-478) > for <[log in to unmask]>; Mon, 28 Jun 2004 07:58:03 -0500 > Received: from abraham.elitel.it (vdisk2.elitel.it [212.34.224.151]) > by osgood.cc.nd.edu (Switch-3.1.6a/Switch-3.1.0) with SMTP id > i5SCw0aB017629 > for <[log in to unmask]>; Mon, 28 Jun 2004 07:58:01 -0500 (EST) > Received: (qmail 18209 invoked by uid 65534); 28 Jun 2004 12:58:01 -0000 > Received: from 81.199.83.13 ([81.199.83.13]) > by www.postino.punto.it (IMP) with HTTP > for <[log in to unmask]@212.34.224.143>; Mon, 28 Jun 2004 > 14:58:01 +0200 > Message-ID: <[log in to unmask]> > Date: Mon, 28 Jun 2004 14:58:01 +0200 > From: [log in to unmask] > To: [log in to unmask] > Subject: TRUSTED PARTNER NEEDED > MIME-Version: 1.0 > Content-Type: text/plain; charset=ISO-8859-1 > Content-Transfer-Encoding: 8bit > User-Agent: Internet Messaging Program (IMP) 3.2.2 > X-Originating-IP: 81.199.83.13 > X-ND-MTA-Date: Mon, 28 Jun 2004 07:58:02 -0500 (EST) > X-ND-Virus-Scan: engine v4.3.20; dat v4370 -- Paul Russell Senior Systems Administrator OIT Messaging Services Team University of Notre Dame