Re: spam

[Nadim Shaikli <shaikli at yahoo dot com>]

--- Munzir Taha <munzirtaha at newhorizons dot com dot sa> wrote:
> On Wednesday 05 May 2004 02:18 am, Armelle Nedelec wrote:
> > > I don't see that message on our CVS mailing-list (archives) and I didn't
> > > receive it myself.  
> 
> It's here
> http://lists.arabeyes.org/archives/cvs/2004/May/msg00028.html
> and I can't believe you didn't receive it ;)

I stand corrected.  Let's take this issue to the 'admin' mailing-list.
Someone more experianced in these issues (ie. spoofed emails) MUST look
at this immediately so arabeyes.org is a bit more hardened.

Salam.

 - Nadim

> > > We go through GREAT lengths to filter out spam so if 
> > > this is a legit message that came from arabeyes.org, I'd like to know to
> > > better harden our defenses.  If its a spoof (ie. someone claiming to be
> > > arabeyes.org), well then I'm not sure what (if anything) we can do except
> > > to report 'em.
> 
> > To know that you'll need the orginal mail with it's header in order to
> > know the IP who sent the mail. At least we'll know if it has something
> > to do with arabeyes, or just someone who picked the domain name (more
> > probably)
> >
> > Regarda
> > Armelle
> 
> Here is the whole header and it's clear that it's a problem in your 
> configurations ;)
> 
> Return-Path: <cvs-bounces at arabeyes dot org>
>  Received: from arabeyes.org ([216.18.0.60] verified)
>   by snobar.net (CommuniGate Pro SMTP 4.1.3)
>   with ESMTP id 4674585 for munzirtaha at newhorizons dot com dot sa; Sun, 02 May 2004 
> 22:55:22 +0300
>  Received: from [127.0.0.1] (sina [127.0.0.1])
>         by arabeyes.org (Postfix) with ESMTP
>         id D485532E27; Sun,  2 May 2004 13:06:20 -0700 (PDT)
>  X-Original-To: cvs at arabeyes dot org
>  Delivered-To: cvs at arabeyes dot org
>  Received: from RESA-2.resa.local (resa-2.resa.org [208.246.30.5])
>         by arabeyes.org (Postfix) with ESMTP id 9BF7532E00
>         for <cvs at arabeyes dot org>; Sun,  2 May 2004 13:06:18 -0700 (PDT)
>  Received: from mail pickup service by RESA-2.resa.local with Microsoft 
> SMTPSVC;
>         Sun, 2 May 2004 16:05:13 -0400
>  thread-index: AcQwgMeaGimeetJJRxmzjekr/0galg==
>  Thread-Topic: ScanMail Message: To Sender virus found and action taken.
>  From: <Administrator at arabeyes dot org>
>  To: <cvs at arabeyes dot org>
>  Date: Sun, 2 May 2004 16:05:13 -0400
>  Message-ID: <041101c43080$c79ae1e0$051ef6d0 at resa dot local>
>  MIME-Version: 1.0
>  Content-Type: text/plain;
>   charset="utf-8"
>  Content-Transfer-Encoding: 7bit
>  X-Mailer: Microsoft CDO for Exchange 2000
>  Content-Class: urn:content-classes:message
>  Importance: normal
>  Priority: normal
>  X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
>  X-OriginalArrivalTime: 02 May 2004 20:05:13.0801 (UTC)
>         FILETIME=[C7B9DB90:01C43080]
>  Subject: ScanMail Message: To Sender virus found and action taken.
>  X-BeenThere: cvs at arabeyes dot org
>  X-Mailman-Version: 2.1.3
>  Precedence: list
>  Reply-To: CVS Commits Notifications <cvs at arabeyes dot org>
>  List-Id: CVS Commits Notifications <cvs.arabeyes.org>
>  List-Unsubscribe: <http://lists.arabeyes.org/mailman/listinfo/cvs>,
>         <mailto:cvs-request at arabeyes dot org?subject=unsubscribe>
>  List-Archive: </archives/cvs>
>  List-Post: <mailto:cvs at arabeyes dot org>
>  List-Help: <mailto:cvs-request at arabeyes dot org?subject=help>
>  List-Subscribe: <http://lists.arabeyes.org/mailman/listinfo/cvs>,
>         <mailto:cvs-request at arabeyes dot org?subject=subscribe>
>  Sender: cvs-bounces at arabeyes dot org
>  Errors-To: cvs-bounces at arabeyes dot org



	
		
__________________________________
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs  
http://hotjobs.sweepstakes.yahoo.com/careermakeover