>Received:	by krypton.rain.com (rnr)
	via rnr; Wed, 21 Aug 2002 17:44:47 PST
To:	opendos AT delorie DOT com
X-Original-Article-From:	"da Silva, Joe" <Joe DOT daSilva AT emailmetering DOT com>
Subject:	Re: Remove Me
From:	shadow AT krypton DOT rain DOT com (Leonard Erickson)
Message-ID:	<20821.174447.8C9.rnr.w165w@krypton.rain.com>
Date:	Wed, 21 Aug 2002 17:44:47 PST
In-Reply-To:	<01FD6EC775C6D4119CDF0090273F74A4FD6820@emwatent02.meters.com.au>
Organization:	Shadownet
X-Mailer:	rnr v2.20
Reply-To:	opendos AT delorie DOT com
Errors-To:	nobody AT delorie DOT com
X-Mailing-List:	opendos AT delorie DOT com
X-Unsubscribes-To:	listserv AT delorie DOT com

In mail you write:

> OK, good to have you still with us.
>
> One comment though - you mention "the guy at aol". Please note
> that invariably the apparent e-mail address of a sp*mmer is fake,
> so if it seems to be from AOL, it invariably isn't.
>
> Also a comment on Matthias' comment about the tracking (header)
> information included in sp*m e-mail and looking at this to see where
> it originated. Again this is usually fake. What may look to be the
> original route of the message is usually a "work of fiction".

True, but the received lines from the point at which the message
entered the Internet *are* valid. So if nothing else, you can use them
to track down open relays and the like.

-- 
Leonard Erickson (aka shadow{G})
 shadow AT krypton DOT rain DOT com        <--preferred
leonard AT qiclab DOT scn DOT rain DOT com     <--last resort

- Raw text -