On Thu, Feb 12, 2009 at 02:57:20PM -0800, Joseph McAllister wrote: # This header? # # From: [email protected] # Subject: Re: ebay question # Date: February 12, 2009 14:47:54 # To: [email protected] # Reply-To: [email protected] # # Or this header? #
the second one, I attached the file in quetion to a private email # From: [email protected] # Subject: Re: ebay question # # Date: February 12, 2009 14:47:54 # # To: [email protected] # Reply-To: [email protected] # Return-Path: <[email protected]> # # Received: from smtpin126-bge351000 # ([10.150.68.126]) by ms121.mac.com (Sun # Java(tm) System Messaging Server 6.3-7.04 (built # Sep 26 2008; 64bit)) with ESMTP id # <[email protected]> for # [email protected]; Thu, 12 Feb 2009 14:47:58 # -0800 (PST) # # Received: from server1.emwd.com # ([74.52.21.50]) by smtpin126.mac.com (Sun # Java(tm) System Messaging Server 6.3-8.01 (built # Dec 16 2008; 32bit)) with ESMTP id # <[email protected]> for # [email protected] (ORCPT [email protected]); # Thu, 12 Feb 2009 14:47:58 -0800 (PST) # # Received: from localhost # ([127.0.0.1] helo=server1.emwd.com) by # server1.emwd.com with esmtp (Exim 4.69) # (envelope-from <[email protected] >) id # 1LXkLW-0001FG-3U; Thu, 12 Feb 2009 17:47:50 -0500 # # Received: from # adsl-66-125-168-234.dsl.snfc21.pacbell.net # ([66.125.168.234] helo=red4est.red4est.com # ident=root) by server1.emwd.com with esmtps # (TLSv1:AES256-SHA:256) (Exim 4.69) # (envelope-from <[email protected]>) id # 1LXkLT-0001F8-27 for [email protected]; Thu, # 12 Feb 2009 17:47:49 -0500 # # Received: from red4est.red4est.com # (l...@localhost [127.0.0.1]) by # red4est.red4est.com (8.13.8/8.13.8/Debian-3) # with ESMTP id n1CMlspG028952 for # <[email protected]>; Thu, 12 Feb 2009 14:47:55 -0800 # # Received: (from l...@localhost) by # red4est.red4est.com (8.13.8/8.13.8/ Submit) id # n1CMls0F028951 for [email protected]; Thu, 12 Feb # 2009 14:47:54 -0800 # # Original-Recipient: # rfc822;[email protected] # # X-Brightmail-Tracker: AAAAAQAAAUA= # # Domainkey-Signature: a=rsa-sha1; # q=dns; c=nofws; s=default; d=pdml.net; # h=From:Date:To:Subject:Message-ID:References:MIME- # Version:Content-Disposition:In-Reply-To:User-Agent:X-Spam-Status:X- # Spam-Score:X-Spam-Bar:X-Spam-Flag:X-BeenThere:X-Mailman- # Version:Precedence:Reply-To:List-Id:List-Unsubscribe:List-Archive:List- # Post:List-Help:List-Subscribe:Content-Type:Content-Transfer- # Encoding:Sender:Errors-To; b=nw/ # AMkcduEyeqHr6APXRuOyVd2cjRwQiizyAjohMTgkEGHS2/OzZOBm # +jhed5qNWeVq3yx3QgPQpkyLBNLvo/sgcr/ # MLZRj0UBrueKEgQ66OXn97nwOJSt0H9hHB42FP; # # Message-Id: # <[email protected]> # # References: <[email protected]> # <[email protected] # > # # Mime-Version: 1.0 # # Content-Disposition: inline # # In-Reply-To: # <[email protected] # > # # User-Agent: Mutt/1.5.13 (2006-08-11) # # X-Spam-Status: No, score=-0.8 # # X-Spam-Score: -7 # # X-Spam-Bar: / # # X-Spam-Flag: NO # # X-Beenthere: [email protected] # # X-Mailman-Version: 2.1.11.cp3 # # Precedence: list # # List-Id: Pentax-Discuss Mail List # <pdml_pdml.net.pdml.net> # # List-Unsubscribe: # <http://pdml.net/mailman/options/pdml_pdml.net>, <mailto:[email protected]?subject=unsubscribe # > # # List-Archive: # <http://pdml.net/pipermail/pdml_pdml.net> # # List-Post: <mailto:[email protected]> # # List-Help: # <mailto:[email protected]?subject=help> # # List-Subscribe: # <http://pdml.net/mailman/listinfo/pdml_pdml.net>, <mailto:[email protected]?subject=subscribe # > # # Content-Type: text/plain; # charset=us-ascii # # Content-Transfer-Encoding: 7bit # # Sender: [email protected] # # Errors-To: [email protected] # # X-Antiabuse: This header was added to # track abuse, please include it with any abuse # report # # X-Antiabuse: Primary Hostname - # server1.emwd.com # # X-Antiabuse: Original Domain - mac.com # # X-Antiabuse: Originator/Caller UID/GID # - [47 12] / [47 12] # # X-Antiabuse: Sender Address Domain - # pdml.net # # I'll assume the second header. In which case # they were wrong in ansking for the header. Long # headers are always required by scam hunters. # # Joe # # On Feb 12, 2009, at 14:47 , Larry Colen wrote: # # >On Thu, Feb 12, 2009 at 03:09:11PM -0500, Adam # >Maas wrote: # ># On Thu, Feb 12, 2009 at 11:42 AM, John # >Sessoms <[email protected] > wrote: # ># > From: Adam Maas # ># # ># I spent a number of years doing Network # >Security work. Dealt with eBay # ># on a regular basis. They're death on any sort # >of Fraud. They care a # ># lot less about disputes between buyer and # >seller though. # > # >I tried sending them everything I could to help # >nail the scammers. # > # >I sent them the pointer to the ebay message, # >with the message cut and # >pasted, I also sent them the email. # > # >They asked for headers, I attached the whole # >mail file with, of # >course, headers, with all of the correspondence. # > # >They sent me a note back, asking for the # >headers. # > # >I sent them the headers, and the file, with # >explanations of how to # >read a mail file to find the headers. They just # >repeated the same # >message I had gotten several times about it not # >being a real second # >chance offer. # > # >I'd guess that they just reprogramed liza to # >answer the abuse mail, # >but a program would do a better job, it could # >grep for the headers. # > # > # >-- # > It's not the steps in the dance, it's # > the dance in the steps. # >Larry Colen [email protected] # >http://www.red4est.com/lrc # > # > # >-- # >PDML Pentax-Discuss Mail List # >[email protected] # >http://pdml.net/mailman/listinfo/pdml_pdml.net # >to UNSUBSCRIBE from the PDML, please visit the # >link directly above and follow the directions. # # # -- # PDML Pentax-Discuss Mail List # [email protected] # http://pdml.net/mailman/listinfo/pdml_pdml.net # to UNSUBSCRIBE from the PDML, please visit the # link directly above and follow the directions. -- It's not the steps in the dance, it's the dance in the steps. Larry Colen [email protected] http://www.red4est.com/lrc -- PDML Pentax-Discuss Mail List [email protected] http://pdml.net/mailman/listinfo/pdml_pdml.net to UNSUBSCRIBE from the PDML, please visit the link directly above and follow the directions.
