From paul at chaos-studio.com Fri Sep 9 11:52:14 2005 From: paul at chaos-studio.com (paul adams) Date: Thu Sep 8 22:52:28 2005 Subject: [SpamCop-Mail] Re: ip removal Message-ID: <4320F8DE.2010100@chaos-studio.com> i contacted sina.com because they had refused a customers mail saying that it was a spam block, so i sent them the information needed and some of it was a bit personal. anyway it seems they are refusing all email and adding a white list, is this the right way to go about it? i did cc this email to here but i hadn't confirmed my subscription and it bounced. antispam wrote: > Dear Customer, > > All of your provided information has been registered, settings will take effects within 24 hours, please test it. Thank you for your supporting for Sina, contact with us whenever you hit any problem. 1, for legal implications i must confirm i am no customer of sina.com, any agreements which are signed by your customers are not extended to this agreement also my information must not be stored, nor may it be sold, leased or transfered. registered? where my i find this information? and who has access to it? also i am not supporting sina but i am supporting my customers requests to solve these issues. regards Paul From jeffg at spamcop.net Fri Sep 9 00:00:49 2005 From: jeffg at spamcop.net (Jeff G.) Date: Thu Sep 8 23:15:02 2005 Subject: [SpamCop-Mail] Re: ip removal References: Message-ID: paul adams wrote: > i contacted sina.com because they had refused a customers mail saying > that it was a spam block, so i sent them the information needed and > some of it was a bit personal. anyway it seems they are refusing all > email and adding a white list, is this the right way to go about it? Their server, their rules. Your customer in common is free to walk away from them if that customer doesn't feel that s/he is being treated correctly. -- Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From paul at chaos-studio.com Sat Sep 10 01:23:53 2005 From: paul at chaos-studio.com (paul adams) Date: Fri Sep 9 12:24:01 2005 Subject: [SpamCop-Mail] [Fwd: SpamCop-Mail Digest, Vol 46, Issue 1] Message-ID: <4321B719.50604@chaos-studio.com> whats up with the date? From jeffg at spamcop.net Fri Sep 9 13:37:39 2005 From: jeffg at spamcop.net (Jeff G.) Date: Fri Sep 9 13:00:02 2005 Subject: [SpamCop-Mail] Re: SpamCop-Mail Digest, Vol 46, Issue 1] References: Message-ID: paul adams wrote: > whats up with the date? Can you please be more specific? -- Thanks and Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From a.macgregor at sympatico.ca Fri Sep 9 18:23:10 2005 From: a.macgregor at sympatico.ca (alan macgregor) Date: Fri Sep 9 17:23:26 2005 Subject: [SpamCop-Mail] [Fwd: SpamCop-Mail Digest, Vol 46, Issue 1] References: <4321B719.50604@chaos-studio.com> Message-ID: <003201c5b584$b37f6bb0$6400a8c0@alan088aaf5722> What date? I don't even remember what I wrote to you. Yvie ----- Original Message ----- From: "paul adams" To: "yvie" Sent: Friday, September 09, 2005 12:23 PM Subject: [SpamCop-Mail] [Fwd: SpamCop-Mail Digest, Vol 46, Issue 1] > whats up with the date? > -------------------------------------------------------------------------------- > _______________________________________________ > SpamCop-Mail mailing list > SpamCop-Mail@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-mail > -------------------------------------------------------------------------------- No virus found in this incoming message. Checked by AVG Anti-Virus. Version: 7.0.344 / Virus Database: 267.10.19/93 - Release Date: 9/8/2005 From a.macgregor at sympatico.ca Fri Sep 9 18:29:30 2005 From: a.macgregor at sympatico.ca (alan macgregor) Date: Fri Sep 9 17:29:42 2005 Subject: [SpamCop-Mail] Re: ip removal References: <4320F8DE.2010100@chaos-studio.com> Message-ID: <004b01c5b585$93a885a0$6400a8c0@alan088aaf5722> Hello, here's an example of the spam I'm getting... Return-Path: Received: from toip4.bellnexxia.net ([209.226.175.87]) by tomts26-srv.bellnexxia.net (InterMail vM.5.01.06.10 201-253-122-130-110-20040306) with ESMTP id <20050909025517.ZXRY1570.tomts26-srv.bellnexxia.net@toip4.bellnexxia.net>; Thu, 8 Sep 2005 22:55:17 -0400 Received: from host86-135-122-32.range86-135.btcentralplus.com (86.135.122.32) by toip4.bellnexxia.net with SMTP; 08 Sep 2005 22:54:43 -0400 Received: from csi.com (t604-333-49-055.nobody'd.net.nz[86.135.122.32]) by bhnc72.blazenetme.net (recffqbw86) with SMTP id <79737136718o83151xcj7f>; Fri, 09 Sep 2005 02:45:05 -0100 Message-Id: <0278967536.18380526803@digitalpla.net> From: "Sadie Hollingsworth" To: "Augermichel" Subject: Fwd: Jamie wants you to see this 8 Date: Fri, 09 Sep 2005 02:43:05 -0100 X-Antivirus: AVG for E-mail 7.0.344 [267.10.19] Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="=======AVGMAIL-4321FA7F1256=======" Please let me know what you can do. Thanks. Yvie ----- Original Message ----- From: "paul adams" To: "yvie" Sent: Thursday, September 08, 2005 10:52 PM Subject: [SpamCop-Mail] Re: ip removal >i contacted sina.com because they had refused a customers mail saying that >it was a spam block, so i sent them the information needed and some of it >was a bit personal. anyway it seems they are refusing all email and adding >a white list, is this the right way to go about it? > > i did cc this email to here but i hadn't confirmed my subscription and it > bounced. > > > antispam wrote: > > > Dear Customer, > > > > All of your provided information has been registered, settings will > take effects within 24 hours, please test it. Thank you for your > supporting for Sina, contact with us whenever you hit any problem. > > > 1, for legal implications i must confirm i am no customer of sina.com, any > agreements which are signed by your customers are not extended to this > agreement also my information must not be stored, nor may it be sold, > leased or transfered. > > registered? where my i find this information? and who has access to it? > > also i am not supporting sina but i am supporting my customers requests to > solve these issues. > > regards > > Paul > > _______________________________________________ > SpamCop-Mail mailing list > SpamCop-Mail@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-mail > > > -- > No virus found in this incoming message. > Checked by AVG Anti-Virus. > Version: 7.0.344 / Virus Database: 267.10.19/93 - Release Date: 9/8/2005 > > From nobody at devnull.spamcop.net Fri Sep 9 17:54:36 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Fri Sep 9 17:55:02 2005 Subject: Attention Yvie - Was: Re: [SpamCop-Mail] Re: ip removal References: <4320F8DE.2010100@chaos-studio.com> Message-ID: "alan macgregor" wrote in message news:mailman.79.1126301381.169.spamcop-mail@news.spamcop.net... > Hello, here's an example of the spam I'm getting... > As it appears you are using Outlook Express, please click on the following and see what the rest of "us" are seeing ... your posts are out of context, you appear to trying to answer folks personally, yet this actual thing is a public newsgroup ... news://news.spamcop.net/spamcop.mail Clicking on the above will activate your OE's newsreader, download the last 1-300 postings. Depending on how / which column is sorted on, one would guess that your recent "mail-list responses" will show up at the bottom of those messages listed. Wherever they appear, you will probably see the same thing ... they are not actually a part of any on-going 'conversation' ... so not sure what you are actually trying to get across. The posting of the actual spam into this newsgroup is very much frowned upon. There is another newsgroup just for spam posting, but much preferred is a Tracking URL. If needed, see the SpamCop Glossary, linked to from the SpamCop FAQ found at http://forum.spamcop.net/forums/index.php?showtopic=2238 From jeffg at spamcop.net Fri Sep 9 19:14:45 2005 From: jeffg at spamcop.net (Jeff G.) Date: Fri Sep 9 18:15:03 2005 Subject: [SpamCop-Mail] Re: ip removal References: <4320F8DE.2010100@chaos-studio.com> Message-ID: alan macgregor wrote: > Hello, here's an example of the spam I'm getting... Aside from Wazoo's response, I have taken the liberty of running the sample set of headers you posted through the Parser, resulting in Tracking URL http://www.spamcop.net/sc?id=z804633780zf4992fa48329933bb0e8dd619dfe2769z . It appears that the spammer used the open proxy at host86-135-122-32.range86-135.btcentralplus.com [86.135.122.32] to connect to toip4.bellnexxia.net with SMTP about 19 hours 20 minutes ago on 08 Sep 2005 at 22:54:43 -0400 (02:54:43 -0000 UTC), injecting a message with a fake Received Header Line timed "Fri, 09 Sep 2005 02:45:05 -0100", (03:45:05 -0000 UTC), or 50 minutes 22 seconds in the future, and with a "Date: Fri, 09 Sep 2005 02:43:05 -0100" (03:43:05 -0000 UTC) Header Line, only 48 minutes 22 seconds in the future. -- Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From nobody at spamcop.net Wed Sep 14 16:20:28 2005 From: nobody at spamcop.net (Ellen) Date: Wed Sep 14 15:30:23 2005 Subject: [SpamCop-Mail] system down 15:25:00 -0400 Message-ID: The system is down -- we have ops looking at it. No ETA yet. Please propagate as needed. Ellen SpamCop From SkyKing140 at webtv.net Wed Sep 21 22:35:56 2005 From: SkyKing140 at webtv.net (Jim Martin) Date: Wed Sep 21 21:50:05 2005 Subject: [SpamCop-Mail] Re: system down 15:25:00 -0400 References: Message-ID: <19157-43320A7C-139@storefull-3252.bay.webtv.net> Thanks, Ellen. I have been busy with my new job but the same thing happened with my Mom's paid 'legacy' account. For now, SkyKing140@spamcop.net still bounces but I am able to report at times if I get there quick enough to remove the bounce "flags". Still wondering, Jim From paulamaceditor at yahoo.com Thu Sep 22 11:50:33 2005 From: paulamaceditor at yahoo.com (Paula McCallum) Date: Thu Sep 22 13:50:45 2005 Subject: [SpamCop-Mail] Anonymous E-mail Message-ID: <20050922175034.93522.qmail@web53910.mail.yahoo.com> I made an inquiry to your site because I received an anonymous e-mail from IP# 66.163.178.61 and noticed that a Bud from your site got an e-mail from Chad Ayers who claimed that someone was using his site. Did you ever find out who the sender was? He also sent me an e-mail. Any help you can give would be appreciated. Paula __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com From jeffg at spamcop.net Fri Sep 23 11:07:21 2005 From: jeffg at spamcop.net (Jeff G.) Date: Fri Sep 23 10:10:03 2005 Subject: [SpamCop-Mail] Re: Anonymous E-mail References: Message-ID: "Paula McCallum" wrote in message news:mailman.84.1127411446.169.spamcop-mail@news.spamcop.net... > I made an inquiry to your site because I received an anonymous e-mail from IP# 66.163.178.61 and noticed that a Bud from your site got an e-mail from Chad Ayers who claimed that someone was using his site. Did you ever find out who the sender was? He also sent me an e-mail. Any help you can give would be appreciated. > Paula A copy of that "anonymous email" would be very helpful in this case (including the full/complete headers). If it contains spam, you can post it in the spamcop.spam group and reference it here. -- Thanks and Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. From paulamaceditor at yahoo.com Fri Sep 23 10:25:55 2005 From: paulamaceditor at yahoo.com (Paula McCallum) Date: Fri Sep 23 12:25:58 2005 Subject: [SpamCop-Mail] Re: Anonymous E-mail In-Reply-To: Message-ID: <20050923162555.62272.qmail@web53910.mail.yahoo.com> Thanks Jeff I will. The message didn't have any spam in it. It has to be from one of the members from our club (approx 170 people) who was disgruntled with an exception that was made with our bi-laws. Paula "Jeff G." wrote: "Paula McCallum" wrote in message news:mailman.84.1127411446.169.spamcop-mail@news.spamcop.net... > I made an inquiry to your site because I received an anonymous e-mail from IP# 66.163.178.61 and noticed that a Bud from your site got an e-mail from Chad Ayers who claimed that someone was using his site. Did you ever find out who the sender was? He also sent me an e-mail. Any help you can give would be appreciated. > Paula A copy of that "anonymous email" would be very helpful in this case (including the full/complete headers). If it contains spam, you can post it in the spamcop.spam group and reference it here. -- Thanks and Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please reply via Forum, Group, or List only. _______________________________________________ SpamCop-Mail mailing list SpamCop-Mail@news.spamcop.net http://news.spamcop.net/mailman/listinfo/spamcop-mail --------------------------------- Yahoo! for Good Click here to donate to the Hurricane Katrina relief effort. From nobody at spamcop.net Tue Sep 27 04:39:54 2005 From: nobody at spamcop.net (Ellen) Date: Tue Sep 27 04:10:36 2005 Subject: [SpamCop-Mail] *** System Maint Window *** Message-ID: System Maintenance Window -- reporting system We will have 2 maintenance windows of about 20 minutes each between 13:00 -0700 and 15:00 -0700 Tuesday, September 27, 2005. You will see the System Under Maintenance announcement on the website and you may note delays in responses to mailed spams. The email system will operate as normal during this period. Thank you for your patience. Ellen SpamCop followups: spamcop Please propagate to the forums. From jeffg at spamcop.net Tue Sep 27 15:33:52 2005 From: jeffg at spamcop.net (Jeff G.) Date: Tue Sep 27 14:40:21 2005 Subject: [SpamCop-Mail] Re: New User Message-ID: This post is in response to the message from Bob that I quoted in my post "New User" to the spamcop.spam newsgroup, which unfortunately is not archived on the web but can be found by pointing your newsreader at news:dhc164$jqe$1@news.spamcop.net . Bob only included one set of full headers, so those will be my focus. It appears that abuse[at]dataforce.net and/or postmaster[at]dataforce.net is sending Bob's SpamCop Reports to the spammer. I suggest that Bob start munging his Reports to those two addresses, and that the Deputies rethink routing for the following: "routeid:10111567 195.42.181.0 - 195.42.181.127 to:abuse[at]dataforce.net Administrator found from whois records". The first upstream address is abuse[at]ruscomnet.ru (which "refuses SpamCop reports"), so I'd go with the second, abuse[at]mci.com. -- Thanks and Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please contact me via Forum only, as Emails may be posted, reported, and/or ridiculed. From jeffg at spamcop.net Tue Sep 27 15:55:26 2005 From: jeffg at spamcop.net (Jeff G.) Date: Tue Sep 27 15:15:24 2005 Subject: [SpamCop-Mail] Re: Another question about SC Email service References: Message-ID: "Borgholio" wrote in message news:dhald4$mps$3@news.spamcop.net... > If I have SC download messages from my other POP accounts, will the messages > still show which email account that they were originally sent to, or will > everything show as being sent to myaddress@spamcop.net? Not exactly. The headers will reveal which server they were collected from, but not the ID used to login to that server, so you can't figure out which address it was sent to if: you are like me and have multiple accounts on a system; the sender doesn't specify the addressee in the headers (many spammers don't); and the ISP doesn't record the SMTP Envelope Recipient (via a "for" clause in the Received Header Line, a separate "Delivered-to:" Header Line, or something similar, like MSN Hotmail doesn't). I have requested that the ID be shown. -- Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please contact me via Forum only, as Emails may be posted, reported, and/or ridiculed. From borgholio at storymind.com Tue Sep 27 13:19:08 2005 From: borgholio at storymind.com (Borgholio) Date: Tue Sep 27 15:20:02 2005 Subject: [SpamCop-Mail] Re: Another question about SC Email service In-Reply-To: References: Message-ID: Jeff G. wrote: > "Borgholio" wrote in message > news:dhald4$mps$3@news.spamcop.net... > >>If I have SC download messages from my other POP accounts, will the > > messages > >>still show which email account that they were originally sent to, or > > will > >>everything show as being sent to myaddress@spamcop.net? > > > Not exactly. The headers will reveal which server they were collected > from, but not the ID used to login to that server, so you can't figure > out which address it was sent to if: you are like me and have multiple > accounts on a system; the sender doesn't specify the addressee in the > headers (many spammers don't); and the ISP doesn't record the SMTP > Envelope Recipient (via a "for" clause in the Received Header Line, a > separate "Delivered-to:" Header Line, or something similar, like MSN > Hotmail doesn't). I have requested that the ID be shown. > Bah, ok then. I've just set my T-bird spam filter to automatically move incoming spam to the Held Mail folder. From there I can report it. So that's an indirect filter, I guess. :) From paulamaceditor at yahoo.com Tue Sep 27 13:58:48 2005 From: paulamaceditor at yahoo.com (Paula McCallum) Date: Tue Sep 27 15:58:54 2005 Subject: [SpamCop-Mail] Re: New User In-Reply-To: Message-ID: <20050927195848.67399.qmail@web53907.mail.yahoo.com> Hi Jeff, Sorry to bother you again but I'm new at this and not much of a computer "geek" (no offense) I just don't understand how this information would pin point who sent this message. I've included the full header below to see if you can make any sense to it. I tried to go back online and post it like you suggested but I couldn't get back on with my username & password (ughh). Anyway, if there's anything you can do, I'd appreciate it. I belong to a motorcycle rider's group of about 170 people, I assume this guy/gal went to the meeting from waht they said in their e-mail which would narrow it down to about 40-50 people who were there that night (it could probably be narrowed down further to about 1/2 with computer access). There can't be that many computer literate folks in our group to have been that sophisticated to post an anonymous e-mail. He wrote to me because I write the group's newsletter and to the guy in our club who receives all corospondence. I don't think I would have found anything on my first attempt if it hadn't been for the spamcop post with his IP # and this happening to someone else (Chad Ayers). Thanks, Paula >From MysteryDude MysteryDude Wed Jun 29 17:00:07 2005X-Apparently-To:paulamaceditor@yahoo.com via 206.190.36.211; Wed, 29 Jun 2005 17:00:07 -0700X-Originating-IP:[66.163.178.61]Return-Path:Authentication-Results:mta139.mail.re2.yahoo.com from=yahoo.com; domainkeys=pass (ok)Received:from 66.163.178.61 (HELO web33814.mail.mud.yahoo.com) (66.163.178.61) by mta139.mail.re2.yahoo.com with SMTP; Wed, 29 Jun 2005 17:00:07 -0700Received:(qmail 25412 invoked by uid 60001); 30 Jun 2005 00:00:07 -0000DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=JkgJes3A2ooJKeoVzHIj0aaGKIEHsuahVY0sLiwjJwFzwl4tXIsjtHoA3LM0LCc8/MWVVQiwR+RMqGZruEfEIK55luP0bFsyq6o/OyfnIFCUif7OZZesT4omuazI4t/9B0IYzfrXX4mlrRQCIL0ePHICrKxdi6UdnfCu6gBFW/k= ;Message-ID:<20050630000007.25410.qmail@web33814.mail.mud.yahoo.com>Received:from [4.154.243.2] by web33814.mail.mud.yahoo.com via HTTP; Wed, 29 Jun 2005 17:00:07 PDTDate:Wed, 29 Jun 2005 17:00:07 -0700 (PDT)From: "MysteryDude MysteryDude" View Contact Details Add Mobile Alert Yahoo! DomainKeys has confirmed that this message was sent by yahoo.com. Learn moreTo:paulamaceditor@yahoo.com, mysteryriders@adelphia.net, deanester@hotmail.comMIME-Version:1.0Content-Type:multipart/alternative; boundary="0-1491621414-1120089607=:24089"Content-Transfer-Encoding:8bitContent-Length:685 [input] [input] [input] [input] Hello I'm writing this letter as a paid member of the Manomet Mystery Riders and also remaining unknown. Something from last months meeting is still bothering me. I want to know why Jack Cribbs can break the Bylaws. I also feel that every paid member should be aware of this. I want a signed statement by Jack Cribbs, the Officers of the group, and the Eboard members stating full responsibility of Sherri Palmer as a road captain in case a accident occurs. This should go to every paid member. No, I state No other club or group would had let this happen. Shame on you! "Jeff G." wrote:This post is in response to the message from Bob that I quoted in my post "New User" to the spamcop.spam newsgroup, which unfortunately is not archived on the web but can be found by pointing your newsreader at news:dhc164$jqe$1@news.spamcop.net . Bob only included one set of full headers, so those will be my focus. It appears that abuse[at]dataforce.net and/or postmaster[at]dataforce.net is sending Bob's SpamCop Reports to the spammer. I suggest that Bob start munging his Reports to those two addresses, and that the Deputies rethink routing for the following: "routeid:10111567 195.42.181.0 - 195.42.181.127 to:abuse[at]dataforce.net Administrator found from whois records". The first upstream address is abuse[at]ruscomnet.ru (which "refuses SpamCop reports"), so I'd go with the second, abuse[at]mci.com. -- Thanks and Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please contact me via Forum only, as Emails may be posted, reported, and/or ridiculed. _______________________________________________ SpamCop-Mail mailing list SpamCop-Mail@news.spamcop.net http://news.spamcop.net/mailman/listinfo/spamcop-mail __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com From MikeE at ster.invalid Tue Sep 27 14:37:59 2005 From: MikeE at ster.invalid (Mike Easter) Date: Tue Sep 27 16:40:03 2005 Subject: [SpamCop-Mail] Re: New User References: Message-ID: Paula McCallum wrote: > I just don't understand how this > information would pin point who sent this message. I don't understand why it is very important to identity sleuth this emailer. This isn't a harsh or threatening or otherwise intimidating email. Just because s/he chose to be anonymous with a yahoo account and a yahoo webmailing doesn't mean those of us who like to dabble in identity sleuthing should be ratting out the sender. The emailer has a beef about someone being a road captain and also something else that transpired at the last meeting. S/He chose to use the yahoo webmailer and accessed it from a level3 dialup. Such a dialup might be associated with any number of providers, because many providers 'contract out' their dialup services. For example, some EarthLink dialup users access from level3 dialups. The fact that the dialup can be geographically associated with somewhere around Methuen MA doesn't tell us very much since we would expect the writer to be not so far from Manomet MA since this type of club is going to have its members geographically proximal to each other. > I assume this guy/gal went to the meeting > from waht they said in their e-mail which would narrow it down to > about 40-50 people who were there that night (it could probably be > narrowed down further to about 1/2 with computer access). That's how you narrow it down all right. > There can't > be that many computer literate folks in our group to have been that > sophisticated to post an anonymous e-mail. This isn't actually a very sophisticated anonymity. > He wrote to me because I > write the group's newsletter and to the guy in our club who receives > all corospondence. I don't think I would have found anything on my > first attempt if it hadn't been for the spamcop post with his IP # > and this happening to someone else (Chad Ayers). -- Mike Easter kibitzer, not SC admin From jeffg at spamcop.net Tue Sep 27 17:42:18 2005 From: jeffg at spamcop.net (Jeff G.) Date: Tue Sep 27 16:45:02 2005 Subject: [SpamCop-Mail] Re: New User References: Message-ID: "Paula McCallum" wrote in message news:mailman.86.1127851135.169.spamcop-mail@news.spamcop.net... > Hi Jeff, Hi Paula, > Sorry to bother you again but I'm new at this and not much of a computer "geek" (no offense) I just don't understand how this information would pin point who sent this message. I've included the full header below to see if you can make any sense to it. I tried to go back online and post it like you suggested but I couldn't get back on with my username & password (ughh). Anyway, if there's anything you can do, I'd appreciate it. I belong to a motorcycle rider's group of about 170 people, I assume this guy/gal went to the meeting from waht they said in their e-mail which would narrow it down to about 40-50 people who were there that night (it could probably be narrowed down further to about 1/2 with computer access). There can't be that many computer literate folks in our group to have been that sophisticated to post an anonymous e-mail. He wrote to me because I write the group's newsletter and to the guy in our club who receives all corospondence. I don't think I would have found > anything on my first attempt if it hadn't been for the spamcop post with his IP # and this happening to someone else (Chad Ayers). > > Thanks, > > Paula My, what a mess of headers! Please see the recommendations "How do I get my email program to reveal the full, unmodified email? : Yahoo Mail" at http://www.spamcop.net/fom-serve/cache/23.html . However, as you can see from the Tracking URL http://www.spamcop.net/sc?id=z809908480z46fda6dca054ebb38212fe142bcf97aez , the true source was using dialup-4.154.243.2.Dial1.Boston1.Level3.net [4.154.243.2] to login to Yahoo! Webmail as mysteryridermember[at]yahoo.com. Since the material appears to be defamatory to Jack Cribbs and/or Sherri Palmer, you could report it in a Manual Report to abuse[at]level3.net, spamtool[at]level3.net, postmaster[at]yahoo.com, and mail-abuse[at]yahoo-inc.com. -- Thanks and Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please contact me via Forum only, as Emails may be posted, reported, and/or ridiculed.