[Novalug] Obvious SPAM

[David Zakar]

I would look into using SPF if you're seriously concerned about address
spoofing, but this won't really help you for the FROM address, only the
return-path.

http://en.wikipedia.org/wiki/Sender_Policy_Framework

-DMZ


On 2/4/08 8:10 AM, "Jay Hart" <jhart at kevla.org> wrote:

> Received this email today. Its an obvious spam email, but what has me a little
> concerned is that they spoofed the 'from' address. I've attached the full
> header and email below.
> 
> Two things:
> 
> 1. How worried should I be about the address spoofing? Should I be worried at
> all about this, or just treat it like a normal spam email?
> 
> 2. I think its funny they mention MSN featured offers.  Ain't no way...  I
> signed up for that crap.
> 
> Jay
> 
> 
> ----begin header-----
> Return-Path: <jhartke at jwterrill.com>
> X-Original-To: jhart at kevla.org
> Delivered-To: jhart at kevla.org
> Received: from localhost (localhost [127.0.0.1])
>      by email.kevla.org (Postfix) with ESMTP id 6FEE856AEB
>      for <jhart at kevla.org>; Mon, 4 Feb 2008 05:51:57 -0500 (EST)
> X-Virus-Scanned: amavisd-new at kevla.org
> X-Spam-Score: 1.939
> X-Spam-Level: *
> X-Spam-Status: No, score=1.939 tagged_above=-100 required=4.1
>      tests=[AWL=-6.233, BAYES_50=0.001, HTML_90_100=0.113,
>      HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.001, NO_REAL_NAME=0.961,
>      URIBL_JP_SURBL=4.087, URIBL_OB_SURBL=3.008]
> Received: from email.kevla.org ([127.0.0.1])
>      by localhost (email.kevla.org [127.0.0.1]) (amavisd-new, port 10024)
>      with ESMTP id FWFgUqrqNlVm for <jhart at kevla.org>;
>      Mon, 4 Feb 2008 05:51:47 -0500 (EST)
> Received: from edunet-static-145.87-197-64.telecom.sk
> (edunet-static-145.87-197-64.telecom.sk [87.197.64.145])
>      by email.kevla.org (Postfix) with SMTP id F205A5698A
>      for <jhart at kevla.org>; Mon, 4 Feb 2008 05:51:41 -0500 (EST)
> Content-Return: allowed
> X-Mailer: CME-V6.5.4.3; MSN
> Received: (qmail 7760 by uid 597); Mon, 4 Feb 2008 11:56:11 +0100
> Message-Id: <20080204125611.7762.qmail at edunet-static-145.87-197-64.telecom.sk>
> To: <jhart at kevla.org>
> Subject: February 71% OFF
> From: <jhart at kevla.org>
> MIME-Version: 1.0
> Content-Type: text/html; charset="ISO-8859-1"
> Content-Transfer-Encoding: 7bit
> Date: Mon, 4 Feb 2008 05:51:41 -0500 (EST)
> -------end header--------
> 
> 
> ------------------------------ Original Message ------------------------------
> Subject: February 71% OFF
> From:    jhart at kevla.org
> Date:    Mon, February 4, 2008 5:51 am
> To:      jhart at kevla.org
> ------------------------------------------------------------------------------
> 
>                                                         Men and Women's
> find Gucci,
> Prada, Chanel,
> Dior and More
> Top Designer
> Brands 77% OFF.
> Coupon #66381. 
>                
>                
>                
>                
>                
>                
>                
> 
> About this
> mailing:
>  You are receiving this e-mail because you subscribed to MSN Featured Offers.
> Microsoft respects your privacy. If you do not wish to receive this MSN
> Featured Offers e-mail, please click the &quot;Unsubscribe&quot; link below.
> This will not unsubscribe you from e-mail communications from third-party
> advertisers that may appear in MSN Feature Offers. This shall not constitute
> an offer by MSN. MSN shall not be responsible or liable for the advertisers'
> content nor any of the goods or service advertised. Prices and item
> availability subject to change without notice.
> 
> ©2008 Microsoft | Unsubscribe | More Newsletters | Privacy
> 
> Microsoft Corporation, One Microsoft Way, Redmond, WA 98052
> 
> _______________________________________________
> Novalug mailing list
> Novalug at calypso.tux.org
> http://calypso.tux.org/cgi-bin/mailman/listinfo/novalug