Re: [ProgSoc] Mangle From addresses - [geoff|ccf]@nospam.rift.cybersorceress.com.au

["Tony Young" <tony@nospam.rift.cybersorceress.com.au>]

I've been informed by Shaun that this is happening when someone sends an email
directly from one of the progsoc machines, resulting in a from address of
user@nospam.localhost - which my mailer then translates.

----- Original Message -----
From: "Tony Young" <tony@nospam.rift.cybersorceress.com.au>
To: <progsoc@nospam.progsoc.uts.EDU.AU>
Sent: Friday, April 12, 2002 2:03 PM
Subject: [ProgSoc] Mangle From addresses -
[geoff|ccf]@nospam.rift.cybersorceress.com.au


> Something wierd I've noticed lately is that some emails on the progsoc list
> are coming 'From' geoff@nospam.rift.cybersorceress.com.au and
> ccf@nospam.rift.cybersorceress.com.au.
>
> So what? you ask
>
> Well, rift.cybersorceress.com.au is my home machine, on a private domain,
and
> I know for a fact that the geoff and ccf accounts do not exist.
>
> I also don't expect that these two people have hacked into my machine and
are
> spoofing emails to the progsoc list - I've had no indications of someone
> successfully hacking into my machine, and I seem to remember at least Geoff
> having mailed the list previously using a 'real' address.
>
> I'm just wondering if anyone can explain what may be happening - I suspect
my
> mail server/procmail system is modifying the headers for some strange
reason.
> rift.cybersorceress.com.au is running Mandrake 7.2, Kernel 2.4.1, sendmail
> 8.11.0, procmail 3.14 and imap 4.7c2
>
> tia
> ty
>
> PS: Headers from the emails I've noticed are:
>
> ----------------------------------------------------------------
> Return-Path: <owner-progsoc@nospam.progsoc.uts.EDU.AU>
> Received: from ftoomsh (mail@nospam.ftoomsh.progsoc.uts.edu.au [138.25.6.1])
>  by rift.cybersorceress.com.au (8.11.0/8.11.0) with ESMTP id g3BLh3J20412
>  for <tony@nospam.rift.cybersorceress.com.au>; Fri, 12 Apr 2002 07:43:04 +1000
> Received: from majordom by ftoomsh with local (Exim 3.12 #1 (Debian))
>  id 16vmDG-00056z-00
>  for <progsoc-outgoing@nospam.progsoc.uts.edu.au>; Fri, 12 Apr 2002 07:34:38 +1000
> Received: from www-data by ftoomsh with local (Exim 3.12 #1 (Debian))
>  id 16vmDA-00055s-00
>  for <progsoc@nospam.progsoc.uts.edu.au>; Fri, 12 Apr 2002 07:34:32 +1000
> To: progsoc@nospam.progsoc.uts.EDU.AU
> Subject: Re: [ProgSoc] question
> Message-ID: <1018560870.3cb601669deef@nospam.webmail.progsoc.uts.edu.au>
> Date: Fri, 12 Apr 2002 07:34:30 +1000 (EST)
> From: geoff@nospam.rift.cybersorceress.com.au
> References:
> <Pine.LNX.4.21.0204120003260.18051-100000@nospam.ftoomsh.progsoc.uts.edu.au>
> In-Reply-To:
> <Pine.LNX.4.21.0204120003260.18051-100000@nospam.ftoomsh.progsoc.uts.edu.au>
> MIME-Version: 1.0
> Content-Type: text/plain; charset=ISO-8859-1
> Content-Transfer-Encoding: 8bit
> User-Agent: IMP/PHP IMAP webmail program 2.2.6
> X-Originating-IP: 152.91.32.253
> Sender: owner-progsoc@nospam.progsoc.uts.EDU.AU
> Precedence: list
> List-Id: <progsoc.progsoc.uts.edu.au>
> List-Archive: <http://www.progsoc.uts.edu.au/lists/progsoc/>
> ----------------------------------------------------------------
> and
> ----------------------------------------------------------------
> Return-Path: <owner-progsoc@nospam.progsoc.uts.EDU.AU>
> Received: from ftoomsh (mail@nospam.ftoomsh.progsoc.uts.edu.au [138.25.6.1])
>  by rift.cybersorceress.com.au (8.11.0/8.11.0) with ESMTP id g392qnJ32269
>  for <tony@nospam.rift.cybersorceress.com.au>; Tue, 9 Apr 2002 12:52:50 +1000
> Received: from majordom by ftoomsh with local (Exim 3.12 #1 (Debian))
>  id 16uleh-0004s4-00
>  for <progsoc-outgoing@nospam.progsoc.uts.edu.au>; Tue, 09 Apr 2002 12:46:47 +1000
> Received: from www-data by ftoomsh with local (Exim 3.12 #1 (Debian))
>  id 16ulee-0004rt-00
>  for <progsoc@nospam.progsoc.uts.edu.au>; Tue, 09 Apr 2002 12:46:44 +1000
> To: progsoc@nospam.progsoc.uts.EDU.AU
> Subject: [ProgSoc] Registration on Friday
> Message-ID: <1018320403.3cb2561401a1f@nospam.webmail.progsoc.uts.edu.au>
> Date: Tue, 09 Apr 2002 12:46:44 +1000 (EST)
> From: ccf@nospam.rift.cybersorceress.com.au
> MIME-Version: 1.0
> Content-Type: text/plain
> Content-Transfer-Encoding: 7bit
> User-Agent: IMP/PHP IMAP webmail program 2.2.6
> X-Originating-IP: 63.60.241.195
> Sender: owner-progsoc@nospam.progsoc.uts.EDU.AU
> Precedence: list
> List-Id: <progsoc.progsoc.uts.edu.au>
> List-Archive: <http://www.progsoc.uts.edu.au/lists/progsoc/>
> ----------------------------------------------------------------
>
>
>
>
> -
> You are subscribed to the progsoc mailing list. To unsubscribe, send a
> message containing "unsubscribe" to progsoc-request@nospam.progsoc.uts.edu.au.
> If you are having trouble, ask owner-progsoc@nospam.progsoc.uts.edu.au for help.
>


-
You are subscribed to the progsoc mailing list. To unsubscribe, send a
message containing "unsubscribe" to progsoc-request@nospam.progsoc.uts.edu.au.
If you are having trouble, ask owner-progsoc@nospam.progsoc.uts.edu.au for help.