For your information.. I use Outlook, but other email software have the
same capabilities - you just have to find out how.
If you view options you can display the full internet headers. In it there
are two bits of information that can be used to inform the ISP of the
spammer (not all have both, depends on spammer's connection to the internet)
1) The actual address of the person sending the item. Regardless of what
return address the individual puts on the document this is the identifier
that the sending domain recognizes.
In-Reply-To:
F1AFF6FB553AD011AD9100AA00C2E96D1EF771@xxxxxxxx.xxxxxx.com
<mailto:F1AFF6FB553AD011AD9100AA00C2E96D1EF771@xxxxxxxx.xxxxxx.com>
2) The reply address of the person sending the item. Even if it has been
changed in properties or whatever, this is the address that is linked to the
"from" name.
Forward a copy of the offending email to postmaster@ or abuse@ (or both if
you don't know which will work) to the domains in those two lines as well as
the domain listed in the from address that is fictitious. msn compuserve
aol etc etc don't want the bad press either so they will add their weight to
your complaint if you can point them in the right direction. Indicate that
the email was unsolicited and unwanted and request that they do something
about the offending spammer.
Actual SPAM example:
Received: from satie.arts.usf.edu ([131.247.128.1]) by chekhov.arts.usf.edu
with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2448.0)
id WD04H52Z; Fri, 19 Nov 1999 20:30:43 -0500
Received: from relay10.smtp.psi.net (relay10.smtp.psi.net [38.8.34.2])
by satie.arts.usf.edu (8.9.3/8.9.3) with ESMTP id UAA24660
for <musson@arts.usf.edu>; Fri, 19 Nov 1999 20:35:50 -0500 (EST)
From: rz7he@hotbot.com
Received: from [38.224.1.254] (helo=smtp.thf.org)
by relay10.smtp.psi.net with esmtp (Exim 1.90 #1)
id 11ozQO-0007Sl-00; Fri, 19 Nov 1999 20:34:48 -0500
Received: from HEALTHNET-3/SpoolDir by smtp.thf.org (Mercury 1.44);
19 Nov 99 20:22:10 -0500
Received: from SpoolDir by HEALTHNET-3 (Mercury 1.30); 19 Nov 99 19:15:15
-0500
Received: from lekpx.hotbot.com by smtp.thf.org (Mercury 1.30);
19 Nov 99 19:15:10 -0500
Subject: Businesses: Increase Your Sales!
[bstzh]
Date: Fri, 19 Nov 1999 20:34:48 -0500
> -----Original Message-----
> From: Jim Altman
>
> Spam comes from fake address 99.99% of the time,
sending back a huge
> attachment only burdens you, your server and your
isp.
|