I will probably be telling nonsense, since you know this kind of thing
better than I, but to me it seems that this spam managed to succesfully
cloak its real origin. The spam detection program then went down the
list of computers the mail was said to have passed, and identified the
first identifiable IP on that list as the origin, which was the
Wikipedia mail server.
Andre Egnels
"Jimmy Wales" <jwales(a)bomis.com> schrieb:
I'm having a hard time understanding this one.
----- Forwarded message from Spam_Reports(a)city-guide.com -----
From: Spam_Reports(a)city-guide.com
Date: Tue, 6 Apr 2004 18:55:25 -0800 (PST)
To: <JWALES(a)BOMIS.COM>
Subject: Abuse Reports ( Bomis Inc. / Wikimedia )
[ SpamCop V1.3.4 ]
This message is brief for your comfort. Please use links below for details.
Email from 207.142.131.254 / Tue, 6 Apr 2004 18:55:25 -0800 (PST)
http://www.spamcop.net/w3m?i=z866901771ze124cf063a5bad6f2959275917228b90z
[ Additional comments from recipient ]
[ Offending message ]
Received: from [207.142.131.234] (
helo=mail.wikimedia.org)
by
mail.lunargravity.net with esmtp (Exim 4.22)
id 1BB3Lt-00022T-FV
for x; Tue, 06 Apr 2004 22:03:45 -0500
Received: from
mx2.prserv.net (unknown [207.142.131.254])
by
mail.wikimedia.org (Postfix) with SMTP
id 007E5138BB9; Tue, 6 Apr 2004 18:55:25 -0800 (PST)
Message-ID: <0000______________________3d9d(a)mx2.prserv.net>
To: <x>
From: "TermQuotes" <insureme(a)reliaquote.prserv.net>
Subject: LIFE INSURANCE...Protect Your Family & Save up to 70%
Date: Tue, 06 Apr 2004 21:54:40 01900
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Reply-To: insureme(a)reliaquote.prserv.net
X-Priority: 1
X-MSMail-Priority: Low
X-Mailer: The Bat! (v1.52f) Business
Sensitivity: Confidential
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600
<html><body><p>
<a onmouseover=3D"window.status=3D'Click here...';return true;"
href=3D"=
04;ttp://pws.pr=
5;erv.net/term=
13;uotes/1.htm">
<img border=3D"0"
src=3D"http://pw=
;s.prserv.net/=
;termquotes/1.jpg"
wi=
dth=3D"427" height=3D"291"></a></p>
<p>
<font face=3D"Arial" color=3D"#4e4e4e" size=3D"2">
<a
href=3D"http://pws&=
#46;prserv.net/t&=
#101;rmquotes/service.htm">Chan=
ge your email
preferences</a></font>.</p>
</body></html>
0
----- End forwarded message -----
_______________________________________________
Wikitech-l mailing list
Wikitech-l(a)Wikipedia.org
http://mail.wikipedia.org/mailman/listinfo/wikitech-l