John Foster <[EMAIL PROTECTED]> writes: > I've received some spam, and somthing in the headers made me wonder: > > >>From [EMAIL PROTECTED] Sun May 25 20:11:35 1997 > Return-Path: <[EMAIL PROTECTED]> > <<snip>> > From: [EMAIL PROTECTED] > Received: from mailhost.ExposeInfidelity.com (alt.ExposeInfidelity.com > (206.1.562.999)) by [EMAIL PROTECTED] (8.8.5/8.6.5) with SMTP id > ^^^^^^^^^^^^^^^ > HERE ^
[snip] Is this the first Received header? The one I got had the ones below as well, and this one is almost certainly fake: Received: from holland.it.earthlink.net ("port 55887"@holland-c.it.earthlink.net) by csc.canterbury.ac.nz (PMDF V5.1-8 #17207) with ESMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]; Sun, 25 May 1997 06:09:37 +1200 Received: from smtp.earthlink.net (Cust44.Max1.Washington2.DC.MS.UU.NET [153.34.0.44]) by holland.it.earthlink.net (8.8.5/8.8.5) with SMTP id LAA08128; Sat, 24 May 1997 11:00:39 -0700 (PDT) Received: from mailhost.ExposeInfidelity.com (alt.ExposeInfidelity.com (206.1.562.999)) by [EMAIL PROTECTED] (8.8.5/8.6.5) with SMTP id GAA07467 for <[EMAIL PROTECTED]>; Sat, 24 May 1997 12:49:17 -0600 (EST) Blocking earthlink.net should keep it out though. -- Carey Evans <*> [EMAIL PROTECTED] "Our mail program accidentally deleted our remove list." - Real quote from UCE -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .