Re: spam

[Munzir Taha <munzirtaha at newhorizons dot com dot sa>]

On Wednesday 05 May 2004 02:18 am, Armelle Nedelec wrote:
> > I don't see that message on our CVS mailing-list (archives) and I didn't
> > receive it myself.  

It's here
http://lists.arabeyes.org/archives/cvs/2004/May/msg00028.html
and I can't believe you didn't receive it ;)

> > We go through GREAT lengths to filter out spam so if 
> > this is a legit message that came from arabeyes.org, I'd like to know to
> > better harden our defenses.  If its a spoof (ie. someone claiming to be
> > arabeyes.org), well then I'm not sure what (if anything) we can do except
> > to report 'em.

> To know that you'll need the orginal mail with it's header in order to
> know the IP who sent the mail. At least we'll know if it has something
> to do with arabeyes, or just someone who picked the domain name (more
> probably)
>
> Regarda
> Armelle

Here is the whole header and it's clear that it's a problem in your 
configurations ;)

Return-Path: <cvs-bounces at arabeyes dot org>
 Received: from arabeyes.org ([216.18.0.60] verified)
  by snobar.net (CommuniGate Pro SMTP 4.1.3)
  with ESMTP id 4674585 for munzirtaha at newhorizons dot com dot sa; Sun, 02 May 2004 
22:55:22 +0300
 Received: from [127.0.0.1] (sina [127.0.0.1])
        by arabeyes.org (Postfix) with ESMTP
        id D485532E27; Sun,  2 May 2004 13:06:20 -0700 (PDT)
 X-Original-To: cvs at arabeyes dot org
 Delivered-To: cvs at arabeyes dot org
 Received: from RESA-2.resa.local (resa-2.resa.org [208.246.30.5])
        by arabeyes.org (Postfix) with ESMTP id 9BF7532E00
        for <cvs at arabeyes dot org>; Sun,  2 May 2004 13:06:18 -0700 (PDT)
 Received: from mail pickup service by RESA-2.resa.local with Microsoft 
SMTPSVC;
        Sun, 2 May 2004 16:05:13 -0400
 thread-index: AcQwgMeaGimeetJJRxmzjekr/0galg==
 Thread-Topic: ScanMail Message: To Sender virus found and action taken.
 From: <Administrator at arabeyes dot org>
 To: <cvs at arabeyes dot org>
 Date: Sun, 2 May 2004 16:05:13 -0400
 Message-ID: <041101c43080$c79ae1e0$051ef6d0 at resa dot local>
 MIME-Version: 1.0
 Content-Type: text/plain;
  charset="utf-8"
 Content-Transfer-Encoding: 7bit
 X-Mailer: Microsoft CDO for Exchange 2000
 Content-Class: urn:content-classes:message
 Importance: normal
 Priority: normal
 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
 X-OriginalArrivalTime: 02 May 2004 20:05:13.0801 (UTC)
        FILETIME=[C7B9DB90:01C43080]
 Subject: ScanMail Message: To Sender virus found and action taken.
 X-BeenThere: cvs at arabeyes dot org
 X-Mailman-Version: 2.1.3
 Precedence: list
 Reply-To: CVS Commits Notifications <cvs at arabeyes dot org>
 List-Id: CVS Commits Notifications <cvs.arabeyes.org>
 List-Unsubscribe: <http://lists.arabeyes.org/mailman/listinfo/cvs>,
        <mailto:cvs-request at arabeyes dot org?subject=unsubscribe>
 List-Archive: </archives/cvs>
 List-Post: <mailto:cvs at arabeyes dot org>
 List-Help: <mailto:cvs-request at arabeyes dot org?subject=help>
 List-Subscribe: <http://lists.arabeyes.org/mailman/listinfo/cvs>,
        <mailto:cvs-request at arabeyes dot org?subject=subscribe>
 Sender: cvs-bounces at arabeyes dot org
 Errors-To: cvs-bounces at arabeyes dot org
 
-- 
Munzir Taha  PGP Key available
gpg --recv-keys --keyserver www.mandrakesecure.net F0671821

Telecommunications and Electronics Engineer
Linux Registered User #279362 at http://counter.li.org
Mandrake Club member
Maintainer of Mandrake Arabization Project Status
http://www.arabeyes.org/download/documents/distros/mdkarabicsupport-en/
CIW Designer, ICDL, MOUS
New Horizons CLC
Riyadh, SA