blank spam... whats happening

Discussion in 'NZ Computing' started by whoisthis, Dec 22, 2004.

  1. whoisthis

    whoisthis Guest

    For weeks now I keep getting a blank spam, no subject, no message. The
    whole thing is copied below. Anyone got any suggestions how to stop the
    wanker ?




    From (null) Wed Dec 22 19:56:08 2004
    Return-Path: <>
    Received: from mta7-rme.xtra.co.nz ([210.86.15.143])
    by mta204-rme.xtra.co.nz with ESMTP
    id <>;
    Wed, 22 Dec 2004 19:04:59 +1300
    Received: from dsl-201-128-81-208.prod-infinitum.com.mx
    ([201.128.81.208])
    by mta7-rme.xtra.co.nz with SMTP
    id
    <-inf
    initum.com.mx>;
    Wed, 22 Dec 2004 19:04:57 +1300
    Received: from dns0[1
    Message-Id:
    <-inf
    initum.com.mx>
    Date: Wed, 22 Dec 2004 19:04:59 +1300
    whoisthis, Dec 22, 2004
    #1
    1. Advertising

  2. whoisthis

    Adder Guest

    In article <> in nz.comp on Wed,
    22 Dec 2004 19:59:08 +1300, whoisthis <> says...
    > For weeks now I keep getting a blank spam, no subject, no message. The
    > whole thing is copied below. Anyone got any suggestions how to stop the
    > wanker ?


    are you sure it doesn't contain a dropped attachment (virus)?


    >
    >
    >
    >
    > From (null) Wed Dec 22 19:56:08 2004
    > Return-Path: <>
    > Received: from mta7-rme.xtra.co.nz ([210.86.15.143])
    > by mta204-rme.xtra.co.nz with ESMTP
    > id <>;
    > Wed, 22 Dec 2004 19:04:59 +1300
    > Received: from dsl-201-128-81-208.prod-infinitum.com.mx
    > ([201.128.81.208])
    > by mta7-rme.xtra.co.nz with SMTP
    > id
    > <-inf
    > initum.com.mx>;
    > Wed, 22 Dec 2004 19:04:57 +1300
    > Received: from dns0[1
    > Message-Id:
    > <-inf
    > initum.com.mx>
    > Date: Wed, 22 Dec 2004 19:04:59 +1300
    >
    Adder, Dec 22, 2004
    #2
    1. Advertising

  3. whoisthis

    Adder Guest

    In article <> in nz.comp on Wed,
    22 Dec 2004 19:59:08 +1300, whoisthis <> says...
    > For weeks now I keep getting a blank spam, no subject, no message. The
    > whole thing is copied below. Anyone got any suggestions how to stop the
    > wanker ?


    are you sure it doesn't contain a dropped attachment (virus)?


    >
    >
    >
    >
    > From (null) Wed Dec 22 19:56:08 2004
    > Return-Path: <>
    > Received: from mta7-rme.xtra.co.nz ([210.86.15.143])
    > by mta204-rme.xtra.co.nz with ESMTP
    > id <>;
    > Wed, 22 Dec 2004 19:04:59 +1300
    > Received: from dsl-201-128-81-208.prod-infinitum.com.mx
    > ([201.128.81.208])
    > by mta7-rme.xtra.co.nz with SMTP
    > id
    > <-inf
    > initum.com.mx>;
    > Wed, 22 Dec 2004 19:04:57 +1300
    > Received: from dns0[1
    > Message-Id:
    > <-inf
    > initum.com.mx>
    > Date: Wed, 22 Dec 2004 19:04:59 +1300
    >
    Adder, Dec 22, 2004
    #3
  4. whoisthis

    whoisthis Guest

    In article <>,
    Adder <> wrote:

    > In article <> in nz.comp on Wed,
    > 22 Dec 2004 19:59:08 +1300, whoisthis <> says...
    > > For weeks now I keep getting a blank spam, no subject, no message. The
    > > whole thing is copied below. Anyone got any suggestions how to stop the
    > > wanker ?

    >
    > are you sure it doesn't contain a dropped attachment (virus)?
    >


    Hmm, guess its possible but I thought that there would have been a
    header to say there was an attatchment.
    whoisthis, Dec 22, 2004
    #4
  5. whoisthis

    whoisthis Guest

    In article <>,
    Adder <> wrote:

    > In article <> in nz.comp on Wed,
    > 22 Dec 2004 19:59:08 +1300, whoisthis <> says...
    > > For weeks now I keep getting a blank spam, no subject, no message. The
    > > whole thing is copied below. Anyone got any suggestions how to stop the
    > > wanker ?

    >
    > are you sure it doesn't contain a dropped attachment (virus)?
    >


    Hmm, guess its possible but I thought that there would have been a
    header to say there was an attatchment.
    whoisthis, Dec 22, 2004
    #5
  6. whoisthis

    Chris Hope Guest

    whoisthis wrote:

    > In article <>,
    > Adder <> wrote:
    >
    >> In article <> in nz.comp on
    >> Wed, 22 Dec 2004 19:59:08 +1300, whoisthis <> says...
    >> > For weeks now I keep getting a blank spam, no subject, no message.
    >> > The whole thing is copied below. Anyone got any suggestions how to
    >> > stop the wanker ?

    >>
    >> are you sure it doesn't contain a dropped attachment (virus)?
    >>

    >
    > Hmm, guess its possible but I thought that there would have been a
    > header to say there was an attatchment.


    I've been getting heaps of the same - spam type messages with no body. I
    don't have any anti virus software or anything on my server which would
    strip the body or attachments out either. The most annoying thing is
    that because there's no real content to the message the spam software I
    have running on my mail server can't determine that it's spam...

    --
    Chris Hope - The Electric Toolbox - http://www.electrictoolbox.com/
    Chris Hope, Dec 22, 2004
    #6
  7. whoisthis

    Chris Hope Guest

    whoisthis wrote:

    > In article <>,
    > Adder <> wrote:
    >
    >> In article <> in nz.comp on
    >> Wed, 22 Dec 2004 19:59:08 +1300, whoisthis <> says...
    >> > For weeks now I keep getting a blank spam, no subject, no message.
    >> > The whole thing is copied below. Anyone got any suggestions how to
    >> > stop the wanker ?

    >>
    >> are you sure it doesn't contain a dropped attachment (virus)?
    >>

    >
    > Hmm, guess its possible but I thought that there would have been a
    > header to say there was an attatchment.


    I've been getting heaps of the same - spam type messages with no body. I
    don't have any anti virus software or anything on my server which would
    strip the body or attachments out either. The most annoying thing is
    that because there's no real content to the message the spam software I
    have running on my mail server can't determine that it's spam...

    --
    Chris Hope - The Electric Toolbox - http://www.electrictoolbox.com/
    Chris Hope, Dec 22, 2004
    #7
  8. whoisthis

    whoisthis Guest

    In article <cqb95d$3fe$>,
    Chris Hope <> wrote:

    > whoisthis wrote:
    >
    > > In article <>,
    > > Adder <> wrote:
    > >
    > >> In article <> in nz.comp on
    > >> Wed, 22 Dec 2004 19:59:08 +1300, whoisthis <> says...
    > >> > For weeks now I keep getting a blank spam, no subject, no message.
    > >> > The whole thing is copied below. Anyone got any suggestions how to
    > >> > stop the wanker ?
    > >>
    > >> are you sure it doesn't contain a dropped attachment (virus)?
    > >>

    > >
    > > Hmm, guess its possible but I thought that there would have been a
    > > header to say there was an attatchment.

    >
    > I've been getting heaps of the same - spam type messages with no body. I
    > don't have any anti virus software or anything on my server which would
    > strip the body or attachments out either. The most annoying thing is
    > that because there's no real content to the message the spam software I
    > have running on my mail server can't determine that it's spam...


    I think that is maybe the point, are they using blank messages to probe
    for weaknesses in peoples mail filters ?
    whoisthis, Dec 22, 2004
    #8
  9. whoisthis

    whoisthis Guest

    In article <cqb95d$3fe$>,
    Chris Hope <> wrote:

    > whoisthis wrote:
    >
    > > In article <>,
    > > Adder <> wrote:
    > >
    > >> In article <> in nz.comp on
    > >> Wed, 22 Dec 2004 19:59:08 +1300, whoisthis <> says...
    > >> > For weeks now I keep getting a blank spam, no subject, no message.
    > >> > The whole thing is copied below. Anyone got any suggestions how to
    > >> > stop the wanker ?
    > >>
    > >> are you sure it doesn't contain a dropped attachment (virus)?
    > >>

    > >
    > > Hmm, guess its possible but I thought that there would have been a
    > > header to say there was an attatchment.

    >
    > I've been getting heaps of the same - spam type messages with no body. I
    > don't have any anti virus software or anything on my server which would
    > strip the body or attachments out either. The most annoying thing is
    > that because there's no real content to the message the spam software I
    > have running on my mail server can't determine that it's spam...


    I think that is maybe the point, are they using blank messages to probe
    for weaknesses in peoples mail filters ?
    whoisthis, Dec 22, 2004
    #9
  10. whoisthis

    Ralph Fox Guest

    On Wed, 22 Dec 2004 19:59:08 +1300, in message
    <>, whoisthis wrote:

    > For weeks now I keep getting a blank spam, no subject, no message. The
    > whole thing is copied below.


    Evidently e-mailed by a buggy piece of spamware.
    I get ones like it too.


    > Anyone got any suggestions how to stop the
    > wanker ?


    Stop the spam or stop the spammer?

    • The spam

    The message-id was added by Xtra (because the message lacked one
    when it arrived on Xtra's mail server), but the message was not
    posted by Xtra.

    Filter on that combo, if your email filters have that capability.

    • The spammer

    The IP address 201.128.81.208 _is_ dsl-201-128-81-208.prod-infinitum.com.mx.

    It could be the spammer itself, but just as likely it is an 0wn3d pc
    running a spammer email proxy.

    You could try sending an email to abuse at uninet.net.mx
    with the headers of the email.


    > From (null) Wed Dec 22 19:56:08 2004


    'From ' separator line added by your email program.

    > Return-Path: <>


    Return-Path address provided by spammer (in the SMTP envelope).

    > Received: from mta7-rme.xtra.co.nz ([210.86.15.143])
    > by mta204-rme.xtra.co.nz with ESMTP
    > id <>;
    > Wed, 22 Dec 2004 19:04:59 +1300
    > Received: from dsl-201-128-81-208.prod-infinitum.com.mx
    > ([201.128.81.208])
    > by mta7-rme.xtra.co.nz with SMTP
    > id
    > <-inf
    > initum.com.mx>;
    > Wed, 22 Dec 2004 19:04:57 +1300


    Two 'Received' headers added by Xtra mail server when the email was received.


    > Received: from dns0[1


    Börked 'Received' header added by the buggy spam program.
    Possibly the spamware was attempting to fabricate a 'received' header.

    The original spammer's message appears to have been chopped off at this point.


    > Message-Id:
    > <-inf
    > initum.com.mx>


    Message-ID header added by Xtra because the original message did not have one.
    Note message-ID contains mta?-rme.xtra.co.nz@ where the ? is 0-9.


    > Date: Wed, 22 Dec 2004 19:04:59 +1300


    Date header added by Xtra because the original message did not have one.
    Note NZDT time zone +1300, not a Mexican time zone.



    --
    Cheers,
    Ralph

    "There is only one boss, the customer. And he can fire everybody in
    the company from the chairman on down, simply by spending his money
    somewhere else." -- Sam Walton
    Ralph Fox, Dec 22, 2004
    #10
  11. whoisthis

    Ralph Fox Guest

    On Wed, 22 Dec 2004 19:59:08 +1300, in message
    <>, whoisthis wrote:

    > For weeks now I keep getting a blank spam, no subject, no message. The
    > whole thing is copied below.


    Evidently e-mailed by a buggy piece of spamware.
    I get ones like it too.


    > Anyone got any suggestions how to stop the
    > wanker ?


    Stop the spam or stop the spammer?

    • The spam

    The message-id was added by Xtra (because the message lacked one
    when it arrived on Xtra's mail server), but the message was not
    posted by Xtra.

    Filter on that combo, if your email filters have that capability.

    • The spammer

    The IP address 201.128.81.208 _is_ dsl-201-128-81-208.prod-infinitum.com.mx.

    It could be the spammer itself, but just as likely it is an 0wn3d pc
    running a spammer email proxy.

    You could try sending an email to abuse at uninet.net.mx
    with the headers of the email.


    > From (null) Wed Dec 22 19:56:08 2004


    'From ' separator line added by your email program.

    > Return-Path: <>


    Return-Path address provided by spammer (in the SMTP envelope).

    > Received: from mta7-rme.xtra.co.nz ([210.86.15.143])
    > by mta204-rme.xtra.co.nz with ESMTP
    > id <>;
    > Wed, 22 Dec 2004 19:04:59 +1300
    > Received: from dsl-201-128-81-208.prod-infinitum.com.mx
    > ([201.128.81.208])
    > by mta7-rme.xtra.co.nz with SMTP
    > id
    > <-inf
    > initum.com.mx>;
    > Wed, 22 Dec 2004 19:04:57 +1300


    Two 'Received' headers added by Xtra mail server when the email was received.


    > Received: from dns0[1


    Börked 'Received' header added by the buggy spam program.
    Possibly the spamware was attempting to fabricate a 'received' header.

    The original spammer's message appears to have been chopped off at this point.


    > Message-Id:
    > <-inf
    > initum.com.mx>


    Message-ID header added by Xtra because the original message did not have one.
    Note message-ID contains mta?-rme.xtra.co.nz@ where the ? is 0-9.


    > Date: Wed, 22 Dec 2004 19:04:59 +1300


    Date header added by Xtra because the original message did not have one.
    Note NZDT time zone +1300, not a Mexican time zone.



    --
    Cheers,
    Ralph

    "There is only one boss, the customer. And he can fire everybody in
    the company from the chairman on down, simply by spending his money
    somewhere else." -- Sam Walton
    Ralph Fox, Dec 22, 2004
    #11
  12. whoisthis

    whoisthis Guest

    In article <>,
    Ralph Fox <-echo.invalid> wrote:

    >
    > Stop the spam or stop the spammer?
    >
    > • The spam
    >
    > The message-id was added by Xtra (because the message lacked one
    > when it arrived on Xtra's mail server), but the message was not
    > posted by Xtra.
    >
    > Filter on that combo, if your email filters have that capability.


    Actually I filter everything from countries like mexico,
    brazil,china,russia, etc etc.

    >
    > • The spammer
    >
    > The IP address 201.128.81.208 _is_
    > dsl-201-128-81-208.prod-infinitum.com.mx.
    >
    > It could be the spammer itself, but just as likely it is an 0wn3d pc
    > running a spammer email proxy.
    >
    > You could try sending an email to abuse at uninet.net.mx
    > with the headers of the email.


    Tried that in the past, however I have found they have little to no
    interest in killing the spammers.
    whoisthis, Dec 22, 2004
    #12
  13. whoisthis

    whoisthis Guest

    In article <>,
    Ralph Fox <-echo.invalid> wrote:

    >
    > Stop the spam or stop the spammer?
    >
    > • The spam
    >
    > The message-id was added by Xtra (because the message lacked one
    > when it arrived on Xtra's mail server), but the message was not
    > posted by Xtra.
    >
    > Filter on that combo, if your email filters have that capability.


    Actually I filter everything from countries like mexico,
    brazil,china,russia, etc etc.

    >
    > • The spammer
    >
    > The IP address 201.128.81.208 _is_
    > dsl-201-128-81-208.prod-infinitum.com.mx.
    >
    > It could be the spammer itself, but just as likely it is an 0wn3d pc
    > running a spammer email proxy.
    >
    > You could try sending an email to abuse at uninet.net.mx
    > with the headers of the email.


    Tried that in the past, however I have found they have little to no
    interest in killing the spammers.
    whoisthis, Dec 22, 2004
    #13
  14. whoisthis

    Ralph Fox Guest

    On Thu, 23 Dec 2004 00:15:25 +1300, in message
    <>, whoisthis wrote:


    > Actually I filter everything from countries like mexico,
    > brazil,china,russia, etc etc.


    Do you (1) rely on the spammer putting the cctld in the headers,
    or do you (2) do a lookup on the IP address which Xtra's mail
    server reported?

    Here's one I just received. Note (1) won't work on this unless you
    are filtering .com.

    | Return-Path: <>
    | Received: from mta4-rme.xtra.co.nz ([210.86.15.157])
    | by mta203-rme.xtra.co.nz with ESMTP
    | id <>;
    | Wed, 22 Dec 2004 04:30:39 +1300
    | Received: from [203.96.92.132] ([61.105.130.143]) by mta4-rme.xtra.co.nz
    | with SMTP
    | id <20041221153038.VQIQ27312.mta4-rme.xtra.co.nz@[203.96.92.132]>;
    | Wed, 22 Dec 2004 04:30:38 +1300
    | Received: from 54.176.0.126 by 61.105.130.143; Tue, 21 Dec 2004 16:30:24 +0100
    | Message-ID: <Z[20
    | Message-ID: <20041221153038.VQIQ27312.mta4-rme.xtra.co.nz@[203.96.92.132]>
    | Date: Wed, 22 Dec 2004 04:30:39 +1300
    Ralph Fox, Dec 22, 2004
    #14
  15. whoisthis

    Ralph Fox Guest

    On Thu, 23 Dec 2004 00:15:25 +1300, in message
    <>, whoisthis wrote:


    > Actually I filter everything from countries like mexico,
    > brazil,china,russia, etc etc.


    Do you (1) rely on the spammer putting the cctld in the headers,
    or do you (2) do a lookup on the IP address which Xtra's mail
    server reported?

    Here's one I just received. Note (1) won't work on this unless you
    are filtering .com.

    | Return-Path: <>
    | Received: from mta4-rme.xtra.co.nz ([210.86.15.157])
    | by mta203-rme.xtra.co.nz with ESMTP
    | id <>;
    | Wed, 22 Dec 2004 04:30:39 +1300
    | Received: from [203.96.92.132] ([61.105.130.143]) by mta4-rme.xtra.co.nz
    | with SMTP
    | id <20041221153038.VQIQ27312.mta4-rme.xtra.co.nz@[203.96.92.132]>;
    | Wed, 22 Dec 2004 04:30:38 +1300
    | Received: from 54.176.0.126 by 61.105.130.143; Tue, 21 Dec 2004 16:30:24 +0100
    | Message-ID: <Z[20
    | Message-ID: <20041221153038.VQIQ27312.mta4-rme.xtra.co.nz@[203.96.92.132]>
    | Date: Wed, 22 Dec 2004 04:30:39 +1300
    Ralph Fox, Dec 22, 2004
    #15
  16. whoisthis

    whoisthis Guest

    In article <>,
    Ralph Fox <-echo.invalid> wrote:

    > On Thu, 23 Dec 2004 00:15:25 +1300, in message
    > <>, whoisthis wrote:
    >
    >
    > > Actually I filter everything from countries like mexico,
    > > brazil,china,russia, etc etc.

    >
    > Do you (1) rely on the spammer putting the cctld in the headers,
    > or do you (2) do a lookup on the IP address which Xtra's mail
    > server reported?
    >
    > Here's one I just received. Note (1) won't work on this unless you
    > are filtering .com.
    >
    > | Return-Path: <>
    > | Received: from mta4-rme.xtra.co.nz ([210.86.15.157])
    > | by mta203-rme.xtra.co.nz with ESMTP
    > | id
    > | <
    > | .nz>;
    > | Wed, 22 Dec 2004 04:30:39 +1300
    > | Received: from [203.96.92.132] ([61.105.130.143]) by mta4-rme.xtra.co.nz
    > | with SMTP
    > | id
    > | <20041221153038.VQIQ27312.mta4-rme.xtra.co.nz@[203.96.92.132]>;
    > | Wed, 22 Dec 2004 04:30:38 +1300
    > | Received: from 54.176.0.126 by 61.105.130.143; Tue, 21 Dec 2004 16:30:24
    > | +0100
    > | Message-ID: <Z[20
    > | Message-ID:
    > | <20041221153038.VQIQ27312.mta4-rme.xtra.co.nz@[203.96.92.132]>
    > | Date: Wed, 22 Dec 2004 04:30:39 +1300
    >
    >


    here are another 2

    From (null) Thu Dec 23 07:35:26 2004
    Return-Path: <>
    Received: from mta4-rme.xtra.co.nz ([210.86.15.141])
    by mta208-rme.xtra.co.nz with ESMTP
    id <>;
    Thu, 23 Dec 2004 01:11:53 +1300
    Received: from ALyon-210-1-42-202.w81-50.abo.wanadoo.fr ([81.50.255.202])
    by mta4-rme.xtra.co.nz with SMTP
    id
    <81-50.a
    bo.wanadoo.fr>;
    Thu, 23 Dec 2004 01:11:52 +1300
    Received: from degree.netcom.com ([216.52.245.192])
    by emissivity.netcom.com (Sun Java System Messaging Server 6.1 HotFix
    0.01
    (built Jun 24 2004)) with ESMTP id <0K2Q00Z[6
    Message-Id:
    <81-50.a
    bo.wanadoo.fr>
    Date: Thu, 23 Dec 2004 01:11:53 +1300




    From (null) Thu Dec 23 07:35:26 2004
    Return-Path: <>
    Received: from mta5-rme.xtra.co.nz ([210.86.15.142])
    by mta205-rme.xtra.co.nz with ESMTP
    id <>;
    Thu, 23 Dec 2004 02:04:58 +1300
    Received: from SERVERNT ([201.255.32.127]) by mta5-rme.xtra.co.nz with
    SMTP
    id <20041222130455.GNVT560.mta5-rme.xtra.co.nz@SERVERNT>;
    Thu, 23 Dec 2004 02:04:55 +1300
    Received: from salt.nodewarrior.net ([213.130.63.233])
    by chosen.nodewarrior.net (Sun Java System Messaging Server 6.1 HotFix
    0.01
    (built Jun 24 2004)) with ESMTP id <0D3G00S[6
    Message-Id: <20041222130455.GNVT560.mta5-rme.xtra.co.nz@SERVERNT>
    Date: Thu, 23 Dec 2004 02:04:58 +1300
    whoisthis, Dec 22, 2004
    #16
  17. whoisthis

    whoisthis Guest

    In article <>,
    Ralph Fox <-echo.invalid> wrote:

    > On Thu, 23 Dec 2004 00:15:25 +1300, in message
    > <>, whoisthis wrote:
    >
    >
    > > Actually I filter everything from countries like mexico,
    > > brazil,china,russia, etc etc.

    >
    > Do you (1) rely on the spammer putting the cctld in the headers,
    > or do you (2) do a lookup on the IP address which Xtra's mail
    > server reported?
    >
    > Here's one I just received. Note (1) won't work on this unless you
    > are filtering .com.
    >
    > | Return-Path: <>
    > | Received: from mta4-rme.xtra.co.nz ([210.86.15.157])
    > | by mta203-rme.xtra.co.nz with ESMTP
    > | id
    > | <
    > | .nz>;
    > | Wed, 22 Dec 2004 04:30:39 +1300
    > | Received: from [203.96.92.132] ([61.105.130.143]) by mta4-rme.xtra.co.nz
    > | with SMTP
    > | id
    > | <20041221153038.VQIQ27312.mta4-rme.xtra.co.nz@[203.96.92.132]>;
    > | Wed, 22 Dec 2004 04:30:38 +1300
    > | Received: from 54.176.0.126 by 61.105.130.143; Tue, 21 Dec 2004 16:30:24
    > | +0100
    > | Message-ID: <Z[20
    > | Message-ID:
    > | <20041221153038.VQIQ27312.mta4-rme.xtra.co.nz@[203.96.92.132]>
    > | Date: Wed, 22 Dec 2004 04:30:39 +1300
    >
    >


    here are another 2

    From (null) Thu Dec 23 07:35:26 2004
    Return-Path: <>
    Received: from mta4-rme.xtra.co.nz ([210.86.15.141])
    by mta208-rme.xtra.co.nz with ESMTP
    id <>;
    Thu, 23 Dec 2004 01:11:53 +1300
    Received: from ALyon-210-1-42-202.w81-50.abo.wanadoo.fr ([81.50.255.202])
    by mta4-rme.xtra.co.nz with SMTP
    id
    <81-50.a
    bo.wanadoo.fr>;
    Thu, 23 Dec 2004 01:11:52 +1300
    Received: from degree.netcom.com ([216.52.245.192])
    by emissivity.netcom.com (Sun Java System Messaging Server 6.1 HotFix
    0.01
    (built Jun 24 2004)) with ESMTP id <0K2Q00Z[6
    Message-Id:
    <81-50.a
    bo.wanadoo.fr>
    Date: Thu, 23 Dec 2004 01:11:53 +1300




    From (null) Thu Dec 23 07:35:26 2004
    Return-Path: <>
    Received: from mta5-rme.xtra.co.nz ([210.86.15.142])
    by mta205-rme.xtra.co.nz with ESMTP
    id <>;
    Thu, 23 Dec 2004 02:04:58 +1300
    Received: from SERVERNT ([201.255.32.127]) by mta5-rme.xtra.co.nz with
    SMTP
    id <20041222130455.GNVT560.mta5-rme.xtra.co.nz@SERVERNT>;
    Thu, 23 Dec 2004 02:04:55 +1300
    Received: from salt.nodewarrior.net ([213.130.63.233])
    by chosen.nodewarrior.net (Sun Java System Messaging Server 6.1 HotFix
    0.01
    (built Jun 24 2004)) with ESMTP id <0D3G00S[6
    Message-Id: <20041222130455.GNVT560.mta5-rme.xtra.co.nz@SERVERNT>
    Date: Thu, 23 Dec 2004 02:04:58 +1300
    whoisthis, Dec 22, 2004
    #17
  18. whoisthis wrote:
    > I think that is maybe the point, are they using blank messages to probe
    > for weaknesses in peoples mail filters ?


    but how would they know about the weaknesses unless they got a reply?
    Dave - Dave.net.nz, Dec 22, 2004
    #18
  19. whoisthis wrote:
    > I think that is maybe the point, are they using blank messages to probe
    > for weaknesses in peoples mail filters ?


    but how would they know about the weaknesses unless they got a reply?
    Dave - Dave.net.nz, Dec 22, 2004
    #19
  20. whoisthis

    Keith Guest

    "Dave - Dave.net.nz" <> wrote:
    >whoisthis wrote:
    >> I think that is maybe the point, are they using blank messages to probe
    >> for weaknesses in peoples mail filters ?

    >
    >but how would they know about the weaknesses unless they got a reply?


    Perhaps that's the point. If the message doesn't get a bounce, they can
    validate it as a current email addy.

    I have been getting quite a few of these for some time now. They all show as being 318 bytes long on my Outlook client
    Keith, Dec 22, 2004
    #20
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Bryan Martin

    Whats happening to my router?

    Bryan Martin, Jan 9, 2004, in forum: Cisco
    Replies:
    5
    Views:
    5,062
    scott enwright
    Jan 10, 2004
  2. area 51

    Whats happening, more probs

    area 51, Sep 2, 2003, in forum: Computer Support
    Replies:
    0
    Views:
    450
    area 51
    Sep 2, 2003
  3. Lonnie Reynolds

    Whats Happening ????

    Lonnie Reynolds, Jan 19, 2004, in forum: Computer Support
    Replies:
    1
    Views:
    446
    Boomer
    Jan 19, 2004
  4. Robert11
    Replies:
    1
    Views:
    495
    Old Gringo
    Dec 5, 2004
  5. -[Myth]-

    Whats happening to jetstart users

    -[Myth]-, Dec 29, 2004, in forum: NZ Computing
    Replies:
    4
    Views:
    315
    David
    Dec 31, 2004
Loading...

Share This Page