[thelist] Returned mail that did not originate at our organiz ation

Rob Smith rob.smith at THERMON.com
Tue Nov 19 12:00:41 CST 2002


Another venue to think about is that this could be just a marketing firm
using a database of known email address into a template like this:

to: <get_next_known_email_address_from_list_A>
from: <get_next_known_email_address_from_list_B>
Subject: Your Loan Has Been Approved!
Body: <blah blah blah>

I know for certain that programs like SendMail only require a valid email
address with which to send from. But like Anthony said, if all possible
check the email headers. If it continues and you see a particular pattern of
content, just set up a filter.

Rob.Smith


> (ourUser at ourDomain.com). when the virus sent the email it replaced any
> sort of legitimate return address with a random address which just so
> happened to be ourUser at ourDomain.com. therefore when the end
> system AOL
> received the email it assumed it was sent from us because of the fake
> return address.
>
> i hope this is true and it makes sense that it might be, but my boss
> doesn't really want to accept this simple answer.




More information about the thelist mailing list