Xxs Med
Determining the origin of Spam?
Spam will continue spreading as far as it makes profit. If nobody buys from spammers or acts upon their scams, spam will end. This is the obvious and easy way to fight spam. You can ignore and delete spam messages you receive. But you can also take revenge spammer complaint to the spammer's Internet provider (ISP). The ISP blocks your connection and may impose a fine (depending on the acceptable use policy of the ISP). Spammers care of these complaints and try to disguise their messages. That's why finding the right ISP is not always easy.
Take a look inside a spam message. Every email message consists of two parts, the body and head. The body is the actual message text and attachments. The header is a type of the envelope the message. The header shows the address of the sender of the message, the address of the recipient of the message, the message subject and other information. Email Programs usually display these header fields:
From: shows the sender's name and email address.
A: shows the recipient's name and address e-mail.
Date: shows the date that the message has been sent.
Subject: Displays the subject line.
The From: field usually contains mailing address of the sender. This lets you know who sent the message and lets you easily answer. The spammers, of course, do not want you to answer I do not want to know who they are. Therefore, they put forged email addresses in the From: line of your email. So the From: field will not help if you want to determine where the email is spam.
Tip: SpamCombat G-Lock can easily see not only the text of the message, but also all the fields in the message header. You can choose the format of the hearing itself. You can view the message in HTML format, the decoded message, or source.There Received message too many: The fields in the header of each message. e-mail programs may not show the Received: lines, but Received: lines can be very useful for tracing the origin of spam.
Just like a postcard goes through a series of post offices before it is delivered to the recipient, a message e-mail is processed by several mail servers. Each mail server adds a line to the message header – a Received line – containing
– The server name and IP address of the machine the server received the message from and
– The name of the mail server itself.
Each Received: line is inserted at the top of the message header. If we play the message path from sender to receiver, is the highest part of Received: line and walk to the latter, which is where the email originated.
Like the From: field the Received: lines may contain false information to deceive those who want to pursue the spammer. Since every mail server enter the line Received: at the top of the header, begin the analysis of the top.
The Received: lines are usually forged by spammers look like normal Received: fields. We can not tell whether the Received line: is forged or not at first sight. We analyze all the Received: lines chain to find a forged Received: field.
As mentioned earlier, each mail server logs not only its name but also the IP address of the machine that received the message. We just have to look at what the name of a server and put the next server in the chain says. If the servers do not match the above: the line is false.
The origin of the message is what the server immediately after the forged Received: said line from which the message.
Let's see how to determine the origin of spam e-mail works in real life. This is the header of a message of spam received recently:
**************************************************
Return-Path:
Delivered-To: press@mydomain.com
Received: from unknown (HELO 60.17.139.96) (221.200.13.158) by mail1.myserver.xx with
SMTP; November 7, 2006 10:54:16 -0000
Received: from 164.145.240.209 by 60.17.139.96, sea, November 07, 2006 05:53:35 -0500
Date: Tue, November 07, 2006 12:48:35 0200
From: Pharmacy
Reply to: umceqhzjmndfy
X-Priority: 3 (Normal)
Message-ID:
To: press@mydomain.com
Subject: * Med V s cheap! Many QnNXpRy9 Med_s Agra
MIME-Version: 1.0
Content-Type: text / html; charset = us-ascii
Content-Transfer-Encoding: quoted-printable
**************************************************
At first, find the field of forged From:. The email address in the From: and Reply-To: lines do not exist. Thus, the spammer took charge of directing bounced messages and all the indignant replies people can send an e-mail account does not exist.
Secondly, the Subject: line. Contains variations Meds "and" Viagra ", words that are known to be met in the spam messages. Furthermore, this case contains a random character. It is obvious that the subject line is skillfully adapted to fool anti-spam filters.
Finally, we will look at Received: lines. We start with the oldest – Received: from 164.145.240.209 by 60.17.139.96, sea, November 07, 2006 05:53:35 -0500. There are two IP addresses in it: 60.17.139.96 says 164,145,240,209 received the message.
Check if the next (and last in this case) mail server in the chain confirms the state of the first Date: line. In the second Received: field we have: Received: from unknown (HELO 60.17.139.96) (221.200.13.158) with SMTP mail1.myserver.xx, November 7, 2006 10:54:16 -0000.
mail1.myserver.xx is our server and we can trust her. He received a message from an "unknown" host, who says he has the IP address 60.17.139.96. Yes This confirms what the previous Received: line says.
Now let's find out where our mail server received the message. To this end, we look at the address IP brackets before the server name mail1.myserver.xx. It is 221.200.13.15. This is the IP address the connection is established from, and is not 60.17.139.96. The spam message 221.200.13.15 originates. Importantly, not necessarily that the spammer is sitting at the computer 221.200.13.15 and sending spam in the world. It may happen, the owner the team did not even suspect that sending spam. The computer may be hijacked by a Trojan, which is spreading spam without the machine owner's knowledge.
We hope this information will help you identify the spammer's ISP and report the spam so they can take appropriate action.
About the Author
Author is a technical expert associated with development of computer software like Anti-Spam Software Blocker. More information can be found at AntiSpam Software Resources
Outdoor Training Session: Sandbag Carries, Prowler Rows, Soccer Goal Chins…
|
|
“GREY DAISY” Dog T-Shirt Clothes Size XXXS-Medium $8.99 |
|
|
Lot of 35 Dog Clothes, Costumes & Accessories – Sizes XXS, XS, Small & Medium $25.45 |
|
|
Boys Marines Desert Digital BDU SET Pants+Shirt+Cap Sizes XXS, XS,S,M,L,XL 0-20 $39.99 |
|
|
Boys Marines Green Digital BDU SET Pants+Shirt+Cap Sizes XXS, XS,S,M,L,XL 0-20 $39.99 |
|
|
3 COLORS! MENS LIGHTWEIGHT SELF PACK JACKET, WATERPROOF, REFLECTIVE XXS-XL 2X 3X $51.45 |
|
|
3 COLORS! MENS LIGHTWEIGHT SELF PACK JACKET, WATERPROOF, REFLECTIVE XXS-XL 2X 3X $51.45 |
|
|
3 COLORS! MENS LIGHTWEIGHT SELF PACK JACKET, WATERPROOF, REFLECTIVE XXS-XL 2X 3X $51.45 |
|
|
SOLD DESIGN LAB Medium Blue Wash Low Rise Houston Bell Bottom Jeans Sz XXS $39.00 |
|
|
Womens XXS or Girls Medium Lace Sequin Black Tanktop $0.99 |
|
|
GAP BOYS OR GIRLS XXS 3 OVERALL SHORTS MEDIUM BLUE ADJUSTABLE STRAPS 100% COTTON $12.99 |
|
|
Monkey Business Raglan T-Shirt Dog Tee East Side Collection XXS-XL Pet Top $14.95 |
|
|
Monkey Business Raglan T-Shirt Dog Tee East Side Collection XXS-XL Pet Top $15.95 |
|
|
Monkey Business Raglan T-Shirt Dog Tee East Side Collection XXS-XL Pet Top $14.95 |
|
|
Monkey Business Raglan T-Shirt Dog Tee East Side Collection XXS-XL Pet Top $15.95 |
|
|
Dog Tee T-Shirt Born to be Wild Black XXS-Med NEW $9.99 |
|
|
Dog Tee T-Shirt Born to be Wild Black XXS-Med NEW $10.99 |
|
|
Dog Tee T-Shirt Born to be Wild Black XXS-Med NEW $11.99 |
|
|
Dog Tee T-Shirt Born to be Wild Black XXS-Med NEW $12.99 |
|
|
Dog Tee T-Shirt Born to be Wild Black XXS-Med NEW $13.99 |
|
|
Zack & Zoey Duck Pet Costumes Quackers Ducks Halloween Dog Costume Yellow XXS-XL $16.99 |
|
|
G-MAX’09 VISOR GM26X ‘04 XXS-MED SI CH 999459 $14.45 G-MAX’09 VISOR GM26X ‘04 XXS-MED SI CH 999459… |
|
|
G-MAX’09 VISOR GM26X ‘04 XXS-MED BLU CH 999457 $14.45 G-MAX’09 VISOR GM26X ‘04 XXS-MED BLU CH 999457… |
|
|
Milwaukee Motorcycle Clothing Company Ladies Distressed Leather Jacket with Zip Out Liner (Black) $275.00 Women’s Milwaukee Vintage Crazy Horse Leather Jacket. The ultimate riding jacket! Made of the highest quality full-grain cowhide. The Milwaukee Vintage Crazy Horse Jacket is hand distressed to give it that retro vibe. It’s a Jacket for folks like you who not only appreciate a top quality product, but also desire a little something extra to set themselves apart… Whether you ride or not. Now you’r… |
|
|
Swede-O Ankle Lok Ankle Brace $34.95 Ankle Lok® Lace-up ankle brace, Standard Tongue, White or Black w/stabilizers. Ankle Lok® is North America’s most popular lace-up ankle brace! Your best ankle brace! Click here for more information on our best ankle brace…. |
|
|
Tea Collection Baby-Boys Infant Aztec Gallo Romper We took a rooster and gave him an Aztec border background. Your little one will love this mischievous layered sleeve romper. Two big pockets. Bottom snap closure. With printed neck label so there is no tag to irritate.100% cottonMachine wash insdie out / tumble dryImportThis is a clearance item and cannot be returned or exchanged…. |
|
|
KEEDO USA CHARM SET $41.00 Muslin detailed straps add to this cute two-piece top and Capri pants set. The double-layered ruffles, on the back of the Capri pants, add to the femininity of the outfit. Keedo Sizes Size Height Weight |
|
|
Simplicity pattern 9652 (XXS, Pet, Sm, Med, L, XL) $7.50 … |