Re: Re: New User

Paula McCallum <[email protected]> Tue, 27 Sep 2005 12:58:48 -0700 (PDT)
Newsgroups gmane.mail.spam.spamcop.email
Message-ID <[email protected]>
Hi Jeff,
 
Sorry to bother you again but I'm new at this and not much of a computer "geek" (no offense)  I just don't understand how this information would pin point who sent this message. I've included the full header below to see if you can make any sense to it.  I tried to go back online and post it like you suggested but I couldn't get back on with my username & password (ughh).  Anyway, if there's anything you can do, I'd appreciate it.  I belong to a motorcycle rider's group of about 170 people, I assume this guy/gal went to the meeting from waht they said in their e-mail which would narrow it down to about 40-50 people who were there that night (it could probably be narrowed down further to about 1/2 with computer access). There can't be that many computer literate folks in our group to have been that sophisticated to post an anonymous e-mail. He wrote to me because I write the group's newsl
 etter and to the guy in our club who receives all corospondence.  I don't think I would have found
 anything on my first attempt if it hadn't been for the spamcop post with his IP # and this happening to someone else (Chad Ayers).
 
Thanks,
 
Paula
 
>From MysteryDude MysteryDude Wed Jun 29 17:00:07 2005X-Apparently-To:[email protected] via 206.190.36.211; Wed, 29 Jun 2005 17:00:07 -0700X-Originating-IP:[66.163.178.61]Return-Path:<[email protected]>Authentication-Results:mta139.mail.re2.yahoo.com from=yahoo.com; domainkeys=pass (ok)Received:from 66.163.178.61 (HELO web33814.mail.mud.yahoo.com) (66.163.178.61) by mta139.mail.re2.yahoo.com with SMTP; Wed, 29 Jun 2005 17:00:07 -0700Received:(qmail 25412 invoked by uid 60001); 30 Jun 2005 00:00:07 -0000DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=JkgJes3A2ooJKeoVzHIj0aaGKIEHsuahVY0sLiwjJwFzwl4tXIsjtHoA3LM0LCc8/MWVVQiwR+RMqGZruEfEIK55luP0bFsyq6o/OyfnIFCUif7OZZesT4omuazI4t/9B0IYzfrXX4mlrRQCIL0ePHICrKxdi6UdnfCu6gBFW/k= ;Message-ID:<20050630000007.25410.qmail@w
 eb33814.mail.mud.yahoo.com>Received:from [4.154.243.2] by web33814.mail.mud.yahoo.com via HTTP;
 Wed, 29 Jun 2005 17:00:07 PDTDate:Wed, 29 Jun 2005 17:00:07 -0700 (PDT)From: "MysteryDude MysteryDude" <[email protected]>  View Contact Details   Add Mobile Alert 
Yahoo! DomainKeys has confirmed that this message was sent by yahoo.com. Learn moreTo:[email protected], [email protected], [email protected]:1.0Content-Type:multipart/alternative; boundary="0-1491621414-1120089607=:24089"Content-Transfer-Encoding:8bitContent-Length:685 [input]   [input]   [input]   [input]  Hello
 
I'm writing this letter as a paid member of the Manomet Mystery Riders and also remaining unknown. Something from last months meeting is still bothering me. I want to know why Jack Cribbs can break the Bylaws. I also feel that every paid member should be aware of this. I want a signed statement by Jack Cribbs, the Officers of the group, and the Eboard members stating full responsibility of Sherri Palmer as a road captain in case a accident occurs. This should go to every paid member. No,  I state No other club or group would had let this happen. Shame on you! 



 
 
 


"Jeff G." <[email protected]> wrote:This post is in response to the message from Bob that I quoted in my
post "New User" to the spamcop.spam newsgroup, which unfortunately is
not archived on the web but can be found by pointing your newsreader at
news:[email protected] .

Bob only included one set of full headers, so those will be my focus.

It appears that abuse[at]dataforce.net and/or
postmaster[at]dataforce.net is sending Bob's SpamCop Reports to the
spammer. I suggest that Bob start munging his Reports to those two
addresses, and that the Deputies rethink routing for the following:
"routeid:10111567 195.42.181.0 - 195.42.181.127
to:abuse[at]dataforce.net
Administrator found from whois records". The first upstream address is
abuse[at]ruscomnet.ru (which "refuses SpamCop reports"), so I'd go with
the second, abuse[at]mci.com.

-- 
Thanks and Best Regards, Jeff G.
I have been a SpamCop User/Member/Customer since 1999 and am a
Moderator of the new web-based forums (now the primary method for
getting help, http://forum.spamcop.net). Please contact me via Forum
only, as Emails may be posted, reported, and/or ridiculed.

_______________________________________________
SpamCop-Mail mailing list
[email protected]
http://news.spamcop.net/mailman/listinfo/spamcop-mail


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com