RE: [cobalt-security] Sendmail Patch

["John Langham" <jl@xxxxxxxxxxxx>]

I had two forgeries at the being of the month.

The mail you're getting that looks like it's from
Spamcop is likely a forgery. Spamcop complaints come
from an address like 12345678@xxxxxxxxxxxxxxxxxxxx

John

-----Original Message-----
From: cobalt-security-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-security-admin@xxxxxxxxxxxxxxx]On Behalf Of Larry Smith
Sent: 12 March 2003 01:52
To: cobalt-security@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-security] Sendmail Patch


INRE RE: [cobalt-security] Sendmail Patch:
> Hi all,
>
> Spamcop themselves are not fake, if you were referring to someone
> sending an email pretending to be from Spamcop...well maybe.
>
> My server colocater uses Spamcop and I had a spamming inceident that was
> report 100% accurate by Spamcop, middle of last year.
> regards,
>
> Todd Kirk
>
> > I think you will find that your spamcop.net email is fake.
> > Email spamcop.net and ask them they will give you a
> > better answer.
> >
> > John
>

Todd is pretty correct.  My suggestion is to "view" the header contents of
the message.  The one I received today (for one of our domains) was actually
sent from Korea - and not from spamcop (mail.julianhaight.com) so I
forwarded
a complete copy to them so they are aware what is going on...  Do a "whois"
against the received from IP address - do _not_ believe the received host
name, they can say anything they want to at the helo prompt....

--
Larry Smith
SysAd ECSIS.NET
sysad@xxxxxxxxx
_______________________________________________
cobalt-security mailing list
cobalt-security@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-security