Re: [suse-security] E-Mail spam?
this mail is pretty funny. usually, you shouldn't read anything like "Betreff" etc. above the Received: headers. moreover it should rather be something like "Subject". could it be that your computer is "thiam.ch"? it looks a lot like the spammer connected directly to gmx (where fetchmail eventually picked it up) and supplied forged HELO information (HELO genie.de) - but anything else seems pretty plausible.
Von:
Datum: Mit, 20. Feb. 2002 14:56:12 Europe/Zurich An: User@213.165.64.20 Betreff: Werbung: Sicherheitshinweis Antwort an: Return-Path: Delivered-To: mail_thiemo@localhost.thiam.ch Delivered-To: GMX delivery to thiemo@gmx.ch Received: from localhost (localhost [127.0.0.1]) by nyffeltrach.thiam.ch (Postfix on SuSE Linux 7.2 (i386)) with ESMTP id 1BE6DC0D1 for ; Wed, 20 Feb 2002 15:00:08 +0100 (CET) Received: from 213.165.64.20 [213.165.64.20] by localhost with POP3 (fetchmail-5.8.0) for mail_thiemo@localhost (single-drop); Wed, 20 Feb 2002 15:00:08 +0100 (CET) Received: (qmail 20586 invoked by uid 0); 20 Feb 2002 13:56:10 -0000 Received: from unknown (HELO genie.de) (211.185.197.130) by mx0.gmx.net (mx021-rz3) with SMTP; 20 Feb 2002 13:56:10 -0000 X-Flags: 0000 Message-Id: <001b34b36dae$3645e3e6$4ea80ba3@phemik> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) X-Msmail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4522.1200 Importance: Normal <<
participants (1)
-
Michael Stern