spammer forging mail from me?

Benjamin Minshall minshal1@pilot.msu.edu
Thu, 28 Sep 2000 19:15:49 -0400


Just where have you been typing in your e-mail address?!? :-)

> -----Original Message-----
> From: linux-user-admin@egr.msu.edu
> [mailto:linux-user-admin@egr.msu.edu]On Behalf Of Ben Pfaff
> Sent: Thursday, September 28, 2000 7:02 PM
> To: linux-user@egr.msu.edu
> Subject: spammer forging mail from me?
>
>
> I just received the following message.  To me, the embedded
> returned message makes it look like a spammer is forging a From:
> address of pfaffben@msu.edu.  I sure as hell don't send mail with
> Subject: "Thank you for subscribing to our News Group".  Does it
> look like that to you guys, too, or is there something weirder
> than that going on?
>
> I've already reported this to abuse@uu.net.
>
> Thanks,
>
> Ben.
>
> ------- Start of forwarded message -------
> X-From-Line: MAILER-DAEMON@uunet.uu.net Thu Sep 28 18:51:05 2000
> Received: from pfaffben.user.msu.edu (localhost) [127.0.0.1]
> 	by pfaffben.user.msu.edu with esmtp (Exim 2.05 #1 (Debian))
> 	id 13emW8-0004fg-00; Thu, 28 Sep 2000 18:51:04 -0400
> Received: from cscw.msu.edu [35.8.233.178]
> 	by localhost with POP3 (fetchmail-5.5.0)
> 	for blp@localhost (single-drop); Thu, 28 Sep 2000 18:51:04
> -0400 (EDT)
> Received: from pilot09.cl.msu.edu [35.9.5.29]
> 	by cscw.msu.edu with esmtp (Exim 3.12 #1 (Debian))
> 	id 13emUC-0002K2-00; Thu, 28 Sep 2000 18:49:04 -0400
> Received: from chi6-1.relay.mail.uu.net (chi6-1.relay.mail.uu.net
> [199.171.54.98])
> 	by pilot09.cl.msu.edu (8.10.2/8.10.2) with ESMTP id e8SMn3S29630
> 	for <pfaffben@msu.edu>; Thu, 28 Sep 2000 18:49:04 -0400
> Received: from localhost by chi6sosrv11.alter.net with internal
> 	(peer crosschecked as: localhost)
> 	id QQjiqt29232;
> 	Thu, 28 Sep 2000 22:49:02 GMT
> Date: Thu, 28 Sep 2000 22:49:02 GMT
> From: MAILER-DAEMON@uunet.uu.net (Mail Delivery Subsystem)
> Subject: Returned mail: Service unavailable
> Message-Id: <QQjiqt29232.200009282249@chi6sosrv11.alter.net>
> To: <pfaffben@msu.edu>
> MIME-Version: 1.0
> Content-Type: multipart/report; report-type=delivery-status;
> 	boundary="QQjiqt29232.970181342/chi6sosrv11.alter.net"
> Auto-Submitted: auto-generated (failure)
> X-UIDL: 8ad3c17b036bec674d28e7f95fab8923
> Lines: 120
> Xref: pfaffben.user.msu.edu other:21601
> X-Gnus-Article-Number: 21601   Thu Sep 28 18:56:23 2000
>
> This is a MIME-encapsulated message
>
> --QQjiqt29232.970181342/chi6sosrv11.alter.net
>
> The original message was received at Thu, 28 Sep 2000 22:48:58 GMT
> from da-13-086-244-carme.infinetgroup.com [209.87.13.86]
>
>    ----- The following addresses had permanent fatal errors -----
> <pfaffben@msu.edu>
>
>    ----- Transcript of session follows -----
> 553 <pfaffben@msu.edu>... unauthorized relay traffic prohibited
> 554 <pfaffben@msu.edu>... Service unavailable
>
> --QQjiqt29232.970181342/chi6sosrv11.alter.net
> Content-Type: message/delivery-status
>
> Reporting-MTA: dns; chi6sosrv11.alter.net
> Received-From-MTA: dns; da-13-086-244-carme.infinetgroup.com
> Arrival-Date: Thu, 28 Sep 2000 22:48:58 GMT
>
> Final-Recipient: rfc822; pfaffben@msu.edu
> Action: failed
> Status: 5.5.0
> Remote-MTA: dns; da-13-086-244-carme.infinetgroup.com
> Last-Attempt-Date: Thu, 28 Sep 2000 22:49:02 GMT
>
> --QQjiqt29232.970181342/chi6sosrv11.alter.net
> Content-Type: message/rfc822
>
> Return-Path: <pfaffben@msu.edu>
> Received: from mail.uu.net by chi6sosrv11.alter.net with SMTP
> 	(peer crosschecked as: da-13-086-244-carme.infinetgroup.com
> [209.87.13.86])
> 	id QQjiqt29073;
> 	Thu, 28 Sep 2000 22:48:58 GMT
> Date: Thu, 28 Sep 2000 22:48:58 GMT
> From: pfaffben@msu.edu
> Message-Id: <QQjiqt29073.200009282248@chi6sosrv11.alter.net>
> Subject: Thank you for subscribing to our News Group
> MIME-Version: 1.0
> Content-Type: text/html; charset=us-ascii
> To: undisclosed-recipients:;
>
> <html>
>
> <head>
> <meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
> <meta name="GENERATOR" content="Microsoft FrontPage 4.0">
> <meta name="ProgId" content="FrontPage.Editor.Document">
> <title>This mail is never sent unsolicited</title>
> </head>
>
> <body background="http://www.esensualshop.com/images/backGood.gif">
>
> <p class="MsoNormal"><a href="http://www.esensualshop.com"><img border="0"
> src="http://www.esensualshop.com/images/LogoFSS.gif" width="105"
> height="114" align="left"></a></p>
> <table border="0" cellpadding="0" cellspacing="0" width="100%">
>   <tr>
>     <td width="100%"><b><font face="Bernhard Modern Roman" size="5"
> color="#004000">
>       <marquee>Your discreet online adult shopping experience from the
> privacy
>       &amp; comfort of your home or office</marquee>
>       </font></b></td>
>   </tr>
> </table>
> <h1><span style="font-size:14.0pt;mso-bidi-font-size:10.0pt">Esensual
> Entertainment Corp. is pleased to announce its improved
> interactive website
> at <a href="http://www.esensualshop.com">http://<span
> style="mso-ansi-font-size:
> 14.0pt">www.esensualshop.com</span></a> . <o:p>
> </o:p>
> </span></h1>
> <p class="MsoBodyText"><b>With the help and input of friends and clients,
> Esensual entertainment Corp. has created a new, very unique and tasteful
> adult
> products site with added high quality products, to maximize your most
> intimate sexual pleasures, and new categories including: Erotic bed time
> toys,
> Lotions, Magazines, Sexy Lingerie, Plus Sizes, Leather &amp; Latex, Gift
> Ideas, Games,
> Books, and the up coming New Movie Releases.&nbsp; Please browse <a
> href="http://www.esensualshop.com">http://www.esensualshop.com</a>
> and send us your comments.</b></p>
> <p class="MsoBodyText"><b>Esensual Entertainment corp., will discount 20%
> of any
> purchase of $50.00 or more of any product on our site, if you order on or
> before
> October 30th , 2000, or while supplies last.&nbsp; All you have to do is
> enter
> code#18081060 in the remarks text box to take advantage of this great
> savings.</b></p>
> <p class="MsoBodyText"><b>On Behalf of Esensual Entertainment
> Corp.</b></p>
> <p class="MsoBodyText"><b>Jessica Cabrera</b></p>
> <p class="MsoBodyText"><b>President</b><span
> style="font-size:14.0pt;mso-bidi-font-size:10.0pt;
> font-family:&quot;Bernhard Modern Roman&quot;"><o:p>
> </o:p>
> </span></p>
> <p class="MsoBodyText">This mail is never sent unsolicited. This is
> ESensualShop.Com Mailing! You have subscribed to receive this mail when we
> have
> new products or Sales at <a
> href="http://www.ESensualShop.Com">http://www.ESensualShop.Com</a>
> .&nbsp;</p
> >
> <p class="MsoBodyText">To unsubscribe <a
> href="http://www.ESensualShop.Com/UnsbscrbForm.htm">Click Here</a> </p>
>
> </body>
>
> </html>
>
>
>
>
> --QQjiqt29232.970181342/chi6sosrv11.alter.net--
>
>
>
> ------- End of forwarded message -------
> _______________________________________________
> linux-user mailing list
> linux-user@egr.msu.edu
> http://www.egr.msu.edu/mailman/listinfo/linux-user