Klarinet Archive - Posting 000808.txt from 2000/12

From: Mark Charette <charette@-----.org>
Subj: Re: [kl] weird mail (waaaaay of topic)
Date: Thu, 14 Dec 2000 20:31:25 -0500

On Fri, 15 Dec 2000, Ian Black wrote:
> My question for Mark is how to tell the originating server. What part of the mail headers tell you
> who to report this cr=p to?

That set (and variants) are the ones ... Since I run the mail server I can identify the IP address of the mail "put" request from the last server. That one's hard to forge. That either means:
1) It's the direct offender or
2) It's a spam/virus "relay station" and it's wide open for relaying mail - just as bad as a direct offender in my book.

Sneezy is set up to check the IP addresses via the RBL (Real-time Black-hole List) so some offensive mail servers are rejected outright. Others get through, but I can always check that last machines IP number.

Mark C.

---------------------------------------------------------------------
Unsubscribe from Klarinet, e-mail: klarinet-unsubscribe@-----.org
Subscribe to the Digest: klarinet-digest-subscribe@-----.org
Additional commands: klarinet-help@-----.org
Other problems: klarinet-owner@-----.org