Re: ReportingID Spam

Andrew Engels Rump (formerly Leif Andrew Rump) <[email protected]>
organized electrons in article
news:[email protected] that appeared as
follows:
> After drinking 3 Pan Galactic Gargle Blasters, Blammo
> <[email protected]> mumbled in news:Xns95C2C9EF6F755blammo@
> 216.154.195.61:
>> On 17 Dec 2004 Gingko entered spamcop.help and left
>> news:[email protected]:
>>> Two of these spams have addresses like "<number>@<my.mail.server>"
>>> in the "To" field.
>>> With theses addresses, I should have had two "unknown users" in
>>> the log files of my SMTP server.
>> Not necessarily, To: is not the same as SMTP RCPT TO:
>
> No and that include Bcc: (and Cc:). We need to get information
> from someone who records the SMTP RCPT TO:. I know spamcop.mail
> is "dead", but I have posted this to the group hoping that someone
> will take it over to the forum - or that I will do it on monday.
>
> What I am suggesting is that Jeff records the RCPT TO: - just as
> my own ISP does in a X-RCPT-TO:. A field just as Return-Path: which
> gives the SMTP input from MAIL FROM:.
>
> Andrew

Have you seen the "Delivered-To" Header Line?  I've asked for a "for"
clause on the Received Header Lines, there hasn't been enough support
for that idea.

-- 
Thanks and Best Regards,  Jeff G.
I have been a SpamCop User/Member/Customer since 1999 and am a
Moderator of the new web-based forums (now the primary method for
getting help, http://forum.spamcop.net).  Please reply via Forum, Group,
or List only.