OT - my domain must have become a spammer's source

[Tim]

On Sun, 2005-08-28 at 11:13 +0700, Fajar Priyanto wrote:

> You can try view the source of the email. In Kmail > open the email > view 
> source (press v).
> 
> Such as:
> Received: from listman.util.phx.redhat.com (listman.util.phx.redhat.com 
> [10.8.4.110])
> 	by hormel.redhat.com (Postfix) with ESMTP
> 	id B5FC473241; Sun, 28 Aug 2005 00:00:28 -0400 (EDT)
> Received: from int-mx1.corp.redhat.com (int-mx1.corp.redhat.com
> 	[172.16.52.254])
> 	by listman.util.phx.redhat.com (8.12.11/8.12.10) with ESMTP id
> 	j7S40HJm021177 for <fedora-list at listman.util.phx.redhat.com>;
> 	Sun, 28 Aug 2005 00:00:17 -0400
> Received: from mx1.redhat.com (mx1.redhat.com [172.16.48.31])
> 	by int-mx1.corp.redhat.com (8.11.6/8.11.6) with ESMTP id j7S40GV03583
> 	for <fedora-list at redhat.com>; Sun, 28 Aug 2005 00:00:16 -0400
> Received: from fed1rmmtao11.cox.net (fed1rmmtao11.cox.net [68.230.241.28])
> 	by mx1.redhat.com (8.12.11/8.12.11) with ESMTP id j7S40EjP007604
> 	for <fedora-list at redhat.com>; Sun, 28 Aug 2005 00:00:15 -0400
> Received: from [68.101.182.212] by fed1rmmtao11.cox.net
> 	(InterMail vM.6.01.04.00 201-2131-118-20041027) with ESMTP
> 	id <20050828040009.LAMF12158.fed1rmmtao11.cox.net@[68.101.182.212]>
> 	for <fedora-list at redhat.com>; Sun, 28 Aug 2005 00:00:09 -0400
> 
> 
> The last paragraph is the first person who sent it. Then you can contact the 
> ISP/or the person.

You do have to be careful with your analysis.  Sometimes the *last* one
is the spammer, preloading the headers by routing their mail through
their own, or other systems.  You don't want to complain to the spammer
about their spam.

-- 
Don't send private replies to my address, the mailbox is ignored.
I read messages from the public lists.