Linux virus or forged address?

Jonathan Ryshpan jonrysh at pacbell.net
Mon Apr 12 18:37:37 UTC 2004


I recently received the following bounce message for a message I never
sent.  Is it possible that some component of my email system (fetchmail
+ sendmail + evolution) has been infected by a virus?  Or has someone
just forged my return address?

Thanks - Jonathan Ryshpan

-----Forwarded Message-----
From: MAILER-DAEMON at admin.thenth.com
To: jonrysh at pacbell.net
Subject: failure notice
Date: Mon, 12 Apr 2004 16:04:23 +0000

Hi. This is the qmail-send program at admin.thenth.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<php at elitemaps.com>:
This address no longer accepts mail.

--- Below this line is a copy of the message.

Return-Path: <jonrysh at pacbell.net>
Received: (qmail 27892 invoked from network); 12 Apr 2004 16:04:19 -0000
Received: from unknown (HELO elitemaps.com) (80.76.47.58)
  by billing.thenth.com with SMTP; 12 Apr 2004 16:04:19 -0000
From: jonrysh at pacbell.net
To: php at elitemaps.com
Subject: Status
Date: Mon, 12 Apr 2004 19:04:20 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0002_0000612F.0000186C"
X-Priority: 3
X-MSMail-Priority: Normal

This is a multi-part message in MIME format.

------=_NextPart_000_0002_0000612F.0000186C
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: 7bit

is that your privacy?

------=_NextPart_000_0002_0000612F.0000186C
Content-Type: application/x-zip-compressed;
	name="disco_party.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="disco_party.zip"

<...Large base64 text deleted...>

------=_NextPart_000_0002_0000612F.0000186C--





More information about the fedora-list mailing list