Newsgroups : Borland : borland.public.delphi.internet.winsock : 2006 Jun : Re: spam sender addresses

www.cryer.info
Managed Newsgroup Archive

Re: spam sender addresses

Subject:Re: spam sender addresses
Posted by:"Ben Hochstrasser" (bh..@tiscali123^h^h^h.ch)
Date:Thu, 1 Jun 2006 23:16:04

theo wrote:

> WxOHT -> not detected as spam
> rokqawmwrp -> spam
> jhmtnr -> spam
> xwldsxu -> spam

What happens if I spam you as "Elmer.Fudd@somesite.com"?

Your best bet is to track the MTAs (ie the SMTP servers via which the
message was delivered):


Received: from [141.168.104.211] (helo=BABY) <-- oops, no PTR record, and
HELO doesn't match host and/or sender domain name

Received: from [60.31.51.197] (helo=217.26.52.30) <-- that one's even worse

From: "correy mann" <minettelooney@easydns.com> <-- oops, display name
doesn't resemble email address. Email address domain name doesn't match
issuing MTA's domain name

To: "merrielle weeks" <myname@mydomain.com> <-- oops, my display name
doesn't match my real name


Bear in mind that technically these are legitimate addresses, but
definitely shouldn't happen in a professional environment. It is quite safe
to assume spam on such hints alone.

--
Ben

Replies:

In response to:

www.cryer.info
Managed Newsgroup Archive