Re: document

Werner Koch <[email protected]> Fri, 06 Aug 2004 18:27:32 +0200
Newsgroups gmane.comp.encryption.gpg.announce
Message-ID <[email protected]>
Hi!

Sorry, that this spam slipped through to the announce list.  Please
do not send any more comments like "what document".  It should be
pretty clear that this is spam with a faked address of mine:

  Received: from localhost ([127.0.0.1] helo=trithemius.gnupg.org)
  	by trithemius.gnupg.org with esmtp (Exim 3.35 #1 (Debian))
  	id 1Bt5HZ-0005SW-00; Fri, 06 Aug 2004 16:01:17 +0200

That's Mailman sending the message to the local MTA

  Received: from kerckhoffs.g10code.com ([217.69.77.222])
  	by trithemius.gnupg.org with esmtp (Exim 3.35 #1 (Debian))
  	id 1Bt5HR-0005SL-00 for <[email protected]>;
  	Fri, 06 Aug 2004 16:01:09 +0200

Here the local MTA has received it from the MX host to be forwarded to
Mailman.

  Received: from ppp-62-10-15-147.dialup.tiscali.it ([62.10.15.147]
  	helo=gnupg.org)
  	by kerckhoffs.g10code.com with esmtp (Exim 3.35 #1 (Debian))
  	id 1Bt5HD-0008SE-00
  	for <[email protected]>; Fri, 06 Aug 2004 16:01:00 +0200

and that is the original spam post from some dialup network to the MX
host.

  From: [email protected]

Well, my address is pretty well known and as such a good faked address.


Do not answer to spam or virii mail, this is more evil than the spam
itself because it is harder to filter out.


Thanks,

  Werner