I use Spamcop (http://spamcop.net/) to parse my headers. It takes a few seconds and gives you the opportunity to report the spammer, but you can get your header information parsed and then back out before sending the report. I don't know how useful reporting by spamcop is, but I get the addresses to complain to. My email server on someone else's host has Spam Assassin. I want to use it to block email from known open relays, but if I turn it on, all my listserv lists and lists like this one are obliterated to the point that I can't read them. All because the have "remove" instructions. Well, hopefully that helps something. Good luck Buck (I hate spam!) -----Original Message----- From: psyche-list-admin@redhat.com [mailto:psyche-list-admin@redhat.com] On Behalf Of Mark Cooke Sent: Wednesday, January 22, 2003 9:07 AM To: psyche-list@redhat.com Subject: Re: Contacting an Open Relay server user by spammer Received: from i >> >> OpenRelay Server: pc-80-193-4-51-nm.blueyonder.co.uk [80.193.4.51] >> >> So why is this blueyonder address in there then ? > > It is the sender's hostname and IP address which in the "Received:" line > is stored right after the sender's greeting string. Read it > like this: > > ignore-senders-greeting-string-here > (pc-80-193-4-51-nm.blueyonder.co.uk [80.193.4.51])(authenticated > bits=0) by mail.pcc.edu.cn (8.12.3/8.12.3) with ESMTP id > h0LItEL9003808for <tuesday350@hotmail.com>; Wed, 22 Jan 2003 02:55:23 > +0800 > > Which translates to: > > Message _from_ (pc-80-193-4-51-nm.blueyonder.co.uk [80.193.4.51]) > received _by_ mail.pcc.edu.cn _for_ <tuesday350@hotmail.com> on > Wed, 22 Jan 2003 02:55:23 +0800 So am I correct in thinking, the mail originated from a blueyonder dialup/broadband account? > There are plenty of sources and FAQs on reading SPAM/UCE mail > headers findable via Google. I have been and alot of them contradict each other, I managed to find two sites, both reviewing the same email header and both said completely different things, hence why I posted to the list to be sute, I was reading them right. Cheers again Mark -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list
