Security Basics mailing list archives
RE: email security issue
From: "David Gillett" <gillettdavid () fhda edu>
Date: Thu, 12 Jun 2003 11:17:36 -0700
This shows us that "postmaster () hagerman com" sent "manager () cdnmarketsquare com" a report that it had failed to deliver a message to a whole bunch of bogus email addresses. Presumably, this was sent because "manager () cdnmarketsquare com" was in the From: or Reply-To: header of the original message. You need the rest of the headers of *that* message -- particularly the Received: headers -- to try to determine where it actually came from. If hagerman.com won't provide them, I guess you may be out of luck. David Gillett
-----Original Message----- From: Shar [mailto:shar () cybermilieu com] Sent: June 12, 2003 08:04 To: security-basics () securityfocus com Subject: Re: email security issue Hello, Today I assigned a different IP address to the virtual domain in question. cdnmarketsquare.com ... there is a message placed on the front page. I have been asked to post the headers of one of the emails to the list so will do so now. Thanks to all of you for your help. I have attempted to contact hagerman.com to obtain the original email but the email was returned. Alexx. -------------------------------------------- Return-Path: <MAILER-DAEMON> Received: from smtp.hagerman.com (smtp.hagerman.com [12.34.168.15]) by ip-66-51-96-147.tera-byte.com (8.10.2/8.10.2) with ESMTP id h599WnF04445 for <manager () cdnmarketsquare com>; Mon, 9 Jun 2003 02:32:49 -0700 Received: by EXCHANGE with Internet Mail Service (5.5.2653.19) id <MHHRAD8D>; Mon, 9 Jun 2003 05:07:22 -0500 Message-ID: <5DA2AB2A7EA0D411A0E10001024512B20A2198B5@EXCHANGE> From: postmaster () hagerman com To: manager () cdnmarketsquare com Subject: Undeliverable: free overnight delievery! no prescription require d . . . . fmbgc Date: Mon, 9 Jun 2003 05:07:22 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) X-MS-Embedded-Report: Content-Type: multipart/mixed; boundary="----_=_NextPart_000_01C32E6E.EB067810" X-UIDL: 81~"!k7%#!cG3!!_#C"! This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_000_01C32E6E.EB067810 Content-Type: text/plain; charset="iso-8859-1" Your message To: ace () hagerman com Subject: free overnight delievery! no prescription required . . . . fmbgc Sent: Tue, 10 Jun 2003 10:00:25 -0500 did not reach the following recipient(s): ace () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient ben () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient books () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient davidbrown () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient denniswatson () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient dsmith () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient eagle () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient er () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient gene () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient glenn () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient james () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient joseph () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient julie () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient kelly () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient leo () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient mable () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient mary () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient pam () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient pau () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient pete () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient peter () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient phil () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient ra () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient ralph () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient ross () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient sale () hagerman com on Mon, 9 Jun 2003 05:07:20 -0500 The recipient name is not recognized The MTS-ID of the original message is: c=us;a= ;p=hagerman ? compa;l=EXCHANGE0306091007MHHRAD8C MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 (000C05A6) Unknown Recipient ------_=_NextPart_000_01C32E6E.EB067810 Content-Type: message/rfc822 Message-ID: <7zv08xxni8f78yen6$4o4@1u8wy> From: manager () cdnmarketsquare com To: ace () hagerman com Subject: free overnight delievery! no prescription required . . . . fmb gc Date: Tue, 10 Jun 2003 10:00:25 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) X-MS-Embedded-Report: Content-Type: text/plain; charset="iso-8859-1" Did you know you can order Prescription Medications online with No Prior Prescription? Medications like Viagra, Phentermine, Adipex, Ultram, PaxilPE and many more. Prescribed Online by a US Licensed Doctor and Shipped Overnight TO YOUR DOOR! <http://rd.yahoo.com/10000759/154/*http://www.web-works-intern
ational.com/14
Click Here
<http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14
Prescription Meds Prescribed Online US Licensed Doctors and Pharmacies
<http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/nu pull/emcrt2_02.jpg> <http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14
Free Online Doctor Consultation
<http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14
Lose Weight Now with Phentermine, Adipex, and Bontril
<http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14
End Impotence Now with Viagra
<http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14
End Pain Now with Ultram, Fioricet, and Tramadol
<http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14
End Muscle Pain Now With Soma and Flexeril
cl <http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/go odbye2.html> ick here if you would not like to receive future mailings. iurubpk rtqc rgyyhaxmxxrn ------_=_NextPart_000_01C32E6E.EB067810-- --------------------------------------------------------------------------- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. Visit us at: http://www.neoteris.com/promos/sf-6-9.htm ---------------------------------------------------------------------------- --------------------------------------------------------------------------- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. Visit us at: http://www.neoteris.com/promos/sf-6-9.htm ----------------------------------------------------------------------------
Current thread:
- email security issue Shar (Jun 11)
- RE: email security issue sanjay . patel (Jun 11)
- Re: email security issue Rus Foster (Jun 11)
- Re: email security issue Christian Lete (Jun 11)
- Re: email security issue chort (Jun 11)
- Re: email security issue Shar (Jun 12)
- RE: email security issue David Gillett (Jun 12)
- Re: email security issue Shar (Jun 12)
- RE: email security issue matt willson (Jun 11)
- RE: email security issue David Gillett (Jun 11)
- RE: email security issue Richard H. Cotterell (Jun 12)
- RE: email security issue David Gillett (Jun 12)
- RE: email security issue Richard H. Cotterell (Jun 12)
- RE: email security issue David Gillett (Jun 12)
- RE: email security issue Richard H. Cotterell (Jun 12)
- <Possible follow-ups>
- Re: email security issue KoRe MeLtDoWn (Jun 11)
- RE: email security issue Garbrecht, Frederick (Jun 12)
- email security issue Shar (Jun 12)