>Received: by krypton.rain.com (rnr)
       via rnr; Wed, 21 Aug 2002 17:44:47 PST
To: opendos AT delorie DOT com
X-Original-Article-From: "da Silva, Joe" <Joe DOT daSilva AT emailmetering DOT com>
Subject: Re: Remove Me
From: shadow AT krypton DOT rain DOT com (Leonard Erickson)
Message-ID: <20821.174447.8C9.rnr.w165w@krypton.rain.com>
Date: Wed, 21 Aug 2002 17:44:47 PST
In-Reply-To: <01FD6EC775C6D4119CDF0090273F74A4FD6820@emwatent02.meters.com.au>
Organization: Shadownet
X-Mailer: rnr v2.20
Received: from krypton by qiclab.scn.rain.com; Wed, 21 Aug 2002 17:55 PDT
Content-Type: text
Reply-To: opendos AT delorie DOT com
Errors-To: nobody AT delorie DOT com
X-Mailing-List: opendos AT delorie DOT com
X-Unsubscribes-To: listserv AT delorie DOT com
Precedence: bulk

In mail you write:

> OK, good to have you still with us.
>
> One comment though - you mention "the guy at aol". Please note
> that invariably the apparent e-mail address of a sp*mmer is fake,
> so if it seems to be from AOL, it invariably isn't.
>
> Also a comment on Matthias' comment about the tracking (header)
> information included in sp*m e-mail and looking at this to see where
> it originated. Again this is usually fake. What may look to be the
> original route of the message is usually a "work of fiction".

True, but the received lines from the point at which the message
entered the Internet *are* valid. So if nothing else, you can use them
to track down open relays and the like.

-- 
Leonard Erickson (aka shadow{G})
 shadow AT krypton DOT rain DOT com        <--preferred
leonard AT qiclab DOT scn DOT rain DOT com     <--last resort