LSTSRV-L Archives

LISTSERV Site Administrators' Forum

LSTSRV-L
Options: Use Monospaced Font
Show Text Part by Default
Condense Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Parts/Attachments: text/plain (13 lines)
Print Reply
Mime-Version:
1.0
Sender:
LISTSERV give-and-take forum <[log in to unmask]>
Date:
Tue, 22 Dec 2009 10:05:24 -0600
Content-Disposition:
inline
Reply-To:
LISTSERV give-and-take forum <[log in to unmask]>
Message-ID:
<[log in to unmask]>
Subject:
Re: spam messages
From:
Andrew Bosch <[log in to unmask]>
Content-Transfer-Encoding:
quoted-printable
In-Reply-To:
<[log in to unmask]>
Content-Type:
text/plain; charset=US-ASCII
Comments:
To: [log in to unmask]
 
>>> Paul Russell <[log in to unmask]> 12/22/2009 10:01 AM >>>
On 12/22/2009 10:45, Andrew Bosch wrote:
> 
> That is a tricky one. The spam sender could be any one of the editors or subscribers, assuming
> that the spams he gets are not just coincidental. If he has access to the MTA logs, the SMTP 
> transaction information could be revealing.
> 

Almost everything useful that he could find in the MTA log should also be
present in the full message headers on the spam.
>>>>>>>>>>>>>>>>>>>>>>>>

Unless the envelope addresses are different from the To and From addresses.

ATOM RSS1 RSS2