[rescue] NOTIFI ABOOT YER EMAIL ACCOUNT :)

[Bill Bradford]

On Wed, Mar 17, 2004 at 12:19:08PM -0500, Sheldon T. Hall wrote:
> The headers on the original message are ...
> 	ohno.mrbill.net (Postfix) with SMTP id 44F473A1A6 for
> 	<rescue at sunhelp.org>; Tue, 16 Mar 2004 21:16:40 -0600 (CST)

Okay.

This is more than funny.

The person who was infected, well, their email client spoofed the sender's
address.

I'll let you see for yourself (lines separated for easier reading):

root at ohno:/disk/log/old-logs> gzgrep 44F473A1A6 03-16-04.mail.log.gz 
Mar 16 21:16:40 ohno.mrbill.net postfix/smtpd[19577]: [ID 197553 mail.info] 
44F473A1A6: client=66-163-16-11.ip.tor.radiant.net[66.163.16.11]

Mar 16 21:16:40 ohno.mrbill.net postfix/cleanup[19359]: [ID 197553 mail.info] 
44F473A1A6: message-id=<snllfsmnqjubcrkfiht at sunhelp.org>

Mar 16 21:16:40 ohno.mrbill.net postfix/nqmgr[25035]: [ID 197553 mail.info] 
44F473A1A6: from=<mcguire at neurotica.com>, size=18334, nrcpt=1 (queue active)

Mar 16 21:16:41 ohno.mrbill.net postfix/local[19541]: [ID 197553 mail.info] 
44F473A1A6: to=<rescue at mrbill.net>, orig_to=<rescue at sunhelp.org>, relay=local, 
delay=1, status=sent ("|/bin/demime - |/usr/local/mailman/mail/mailman post 
rescue")

HAY DAVE MCGUIRE YER INFECTED!  *giggle*

Of course, I know its not Dave, its someone who has this virus, where the
virus picked Dave's name out of a hat in this person's Outlook mailboxes.

Bill

-- 
bill bradford
mrbill at mrbill.net
austin, texas