[Am-info] Microsoft Hotmail spam

[John Poltorak]

On Sat, Apr 27, 2002 at 07:51:47AM -0500, Eric M. Hopper wrote:
> On Sat, 2002-04-27 at 05:38, John Poltorak wrote:
> > 
> > 
> > Does anyone else get spam from Hotmail addresses?
> > 
> > IMV Microsoft is responsible for sending out such unsolicited junk email 
> > because they are owners of the system where it originates.
> > 
> > 
> > Has anyone every tried to complain about it? Who would you complain to 
> > anyway?
> > 
> > It would be nice to see some class action taken against them.
> > 
> > Wasn't there some legislation recently to try and curb this abuse?
> 
> Are you sure the spam is actually from Hotmail?  If you look at the
> headers, I bet it came from someplace completely different.  If Hotmail
> actually sent out spam, they'd be on the RBL in 2 seconds flat, and
> their users wouldn't be able to reach 10-30% of the world.
> 
> The From: header was probably forged to look like it came from hotmail.


I don't actually trust the From: line anyway, I'm more inclined to check 
my Sendmail transaction logs. Here's something which I got earlier today 
which appeared to come from AOL rather than Hotmail:-

64801 S> 220-mail.eyup.org Sendmail IBM OS/2 SENDMAIL VERSION 2.03/2.0 ready at Sat, 27 Apr 2002 11:06:23 +0100

220 ESMTP spoken here
64801 S< EHLO srv1
64801 S> 250-mail.eyup.org Hello [210.155.134.91], pleased to meet you
64801 S> 250-EXPN
64801 S> 250-SIZE
64801 S> 250 HELP
64801 S< MAIL From:<Mickey4u876678900@aol.com> SIZE=1574
64801 S> 250 <Mickey4u876678900@aol.com>... Sender ok
64801 S< RCPT To:<jpolt@bradnet.legend.co.uk>
64801 S> 250 <jpolt@bradnet.legend.co.uk>... Recipient ok
64801 S< DATA
64801 S> 354 Enter mail, end with "." on a line by itself
64801 S> 250 LAA648.01 Message accepted for delivery
64801 S< QUIT
64801 S> 221 mail.eyup.org closing connection


Here, the From: will contain an AOL subscriber, but my mail server is 
taking delivery from 210.155.134.91.

How do I tell who owns that system? 

> -- Eric Hopper (hopper@omnifarious.org 

-- 
John