Re: ReportingID Spam
"Andrew Engels Rump (formerly Leif Andrew Rump)" <[email protected]>
| Newsgroups | gmane.mail.spam.spamcop.email |
|---|---|
| Organization | Blik & Roer |
| Message-ID | <Xns95C3DE5DC6981newandrewrumpdk__39529.0231136189$1103403383$gmane$org@216.154.195.61> |
After drinking 3 Pan Galactic Gargle Blasters, Blammo <[email protected]> mumbled in news:Xns95C2C9EF6F755blammo@ 216.154.195.61: > On 17 Dec 2004 Gingko entered spamcop.help and left > news:[email protected]: >> Two of these spams have addresses like "<number>@<my.mail.server>" >> in the "To" field. >> With theses addresses, I should have had two "unknown users" in >> the log files of my SMTP server. > Not necessarily, To: is not the same as SMTP RCPT TO: No and that include Bcc: (and Cc:). We need to get information from someone who records the SMTP RCPT TO:. I know spamcop.mail is "dead", but I have posted this to the group hoping that someone will take it over to the forum - or that I will do it on monday. What I am suggesting is that Jeff records the RCPT TO: - just as my own ISP does in a X-RCPT-TO:. A field just as Return-Path: which gives the SMTP input from MAIL FROM:. Andrew -- *** The opinions expressed are not necessarily those of my employer. *** * Software Engineer Andrew Engels Rump * BLIK og ROERarbejderforbundet * * Immerkaer 42, 2650 Hvidovre * Tlf: +45 3638 3638, Fax: +45 3638 3639 * Home: N55°41'38.9" E12°29'08.6" (WGS 84) Work: N55°39'50.9" E12°27'47.4" E-mail: mailto:[email protected] WWW http://www.rump.dk/homepage/andrew/