OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: MS hotmail Email Spam
From: Richard Johnson (johnsonrichardBTINTERNET.COM)
Date: Thu Jun 15 2000 - 14:38:19 CDT

True. Even easier is for the sender to set-up their e-mail address on
their e-mail application to be the recipient's e-mail address. e.g.
Netscape Messenger - Edit - Preferences - Mail & Newsgroups - Identity -
Email address.
It is very unlikely that PSINet will do anything - time, money etc.

Cheers,

Richard

"R. Anthony Kolstee" wrote:

> It's this easy:
>
> -------------------------------------------------
> $ telnet mail.hotmail.com 25
> Trying 216.33.151.135...
> Connected to mail.hotmail.com.
> Escape character is '^]'.
> 220-HotMail (NO UCE) ESMTP server ready at Mon Jun 12 19:11:22 2000
> 220 ESMTP spoken here
> HELO hotmail.com
> 250 Requested mail action okay, completed
> MAIL FROM: mxxxxhotmail.com
> 250 Requested mail action okay, completed
> RCPT TO: mxxxxhotmail.com
> 250 Requested mail action okay, completed
> DATA
> 354 Start mail input; end with <CRLF>.<CRLF>
> From: mxxxxhotmail.com
> To: mxxxxhotmail.com
> Subject: Spam test
>
> test
> .
> 250 Requested mail action okay, completed
> quit
> 221 Service closing transmission channel
> Connection closed by foreign host.
> ---------------------------------------------------
>
> The only clue you have is the Received: header, which according to your
> message was:
>
> Received: from [38.37.11.174] by hotmail.com (3.2) with ...
>
> This shows the IP address that made the connection.
>
> -----Original Message-----
> From: Focus on Microsoft Mailing List
> [mailto:FOCUS-MSSECURITYFOCUS.COM]On Behalf Of Johnny Cadavid
> Sent: Monday, June 12, 2000 9:51 PM
> To: FOCUS-MSSECURITYFOCUS.COM
> Subject: Re: MS hotmail Email Spam
>
> well, someone used a winsock spammer and emulated your return address,
> unfortunately there is nothing u can do to stop this because anyone can
> impersonate anyone these days. 

--
Richard Johnson