November 29, 2006

Internet Forgery

I promised to post Joseph's reply to my request for more information about that spam that he accused me of allowing through the listserv. Here is his response with my resulting response.

I didn't actually come out and say it in the message, but basically he forged the headers of the email message. My guess is that he'd already deleted the email in question and then tried to cover his ass and made up a very bad forgery just to save face. Here it is:

Joseph:

From the basic information that you've provided, the email did not go through the listserv.

1: The subject was not rewritten as "[Boylan Announce] Carmine"
2: No listserv X headers are present
3: No headers showing the email went through my email server are present
4: No headers showing that the email was processed my MimeDefang are present
5: No indication in the listserv logs for this email ever having reached the listserv.
6: No indication in my email server logs for this email even having been attempted to be
delivered
7: The time offset provided "-0060" does not follow RFC convention

Perhaps the email in question had a "To:" address as stated; however, it also had a "BCC:" address that was one of your email addresses? In that situation, you would have received an email addressed to "neighborhood@boylanheights.org", but it actually arrived through your normal email path due to the "BCC:".

Unless you can get Eudora to provide a more complete list of headers, the only conclusion that I can make is that the email in question did not go through any of the listservs that I maintain.


Thanks,

Jeff G.

Jeff Groves
email: jgroves@krenim.org Web Site: http://www.krenim.org/

Joseph Huberman wrote:
>
>> X-ClientAddr: 216.234.161.54
>> From: "Carmine Burgos"
>> To:
>> Subject: Carmine
>> Date: Sun, 12 Nov 2006 11:45:47 -0060
>> X-Mailer: Microsoft Office Outlook, Build 11.0.5510
>> Thread-Index: Aca6QJ50TX128ZJLNWQGLWBIGAV9A9==
>> X-Scanned-By: mailscanner.tera-byte.com
>> X-ADDRSPAMFilter: Passed
>> X-Antivirus: AVG for E-mail 7.5.431 [268.14.3/530]
>>
>>
>> Symbol: [Edited out]
>> Current price: Around $0.018
>> Short Term Target: $0.10
>> Long Term Target: $0.45
>>
>>
>> Results from [Edited out]'s latest drilling will be announced very
>> soon. Excitement is building, and the inside word is that
>> the results will exceed expectations!
>>
>>
>> In order to benefit from this lucrative opportunity you need
>> to get in now, before the big news release. There's still
>> time, but not much. The news could be out as early as
>> Tuesday, November 13th.
>>
>> THIS is the one you've been waiting for! Do yourself a
>> favor and make that big score!
>

Posted by Jeff at 08:13 AM | Comments (0)

November 13, 2006

The Boobermans are at it again

Twice now in two months, one of the boobs has sent me an email message attempting to show fault in my actions, but have wound-up shooting themselves in the foot instead.

I'm waiting for a response from Mr. Boob, but I'll paste Mrs. Boob's screw-up below...

In the message below, the perp tries to smugly tell me that the attachment did not go through. Apparently she couldn't understand the plain english directly below the main text of the email that instructed people to view the attachment at the included URL.

So desperate to find fault that they go off half-cocked... or is it half-baked.

==========Boob Mail Begin==============

Return-Path:
Received: from krenim.org ([unix socket])
by hoover.krenim.org (Cyrus v2.3.1-Invoca-RPM-2.3.1-2.6.fc5) with LMTPA;
Thu, 19 Oct 2006 13:07:55 -0400
X-Sieve: CMU Sieve 2.3
Received: from elasmtp-junco.atl.sa.earthlink.net (elasmtp-junco.atl.sa.earthlink.net [209.86.89.63])
by krenim.org (8.13.8/8.13.8) with ESMTP id k9JH7g4p022696
for ; Thu, 19 Oct 2006 13:07:47 -0400
Received: from [66.32.4.198] (helo=QUARK.Treklite.com)
by elasmtp-junco.atl.sa.earthlink.net with asmtp (TLSv1:AES256-SHA:256)
(Exim 4.34)
id 1GaaWr-0007Ax-M1
for jgroves@krenim.org; Thu, 19 Oct 2006 12:13:59 -0400
Message-Id: <7.0.1.0.0.20061019121441.05a74008@Treklite.com>
X-Mailer: QUALCOMM Windows Eudora Version 7.0.1.0
Date: Thu, 19 Oct 2006 12:14:57 -0400
To: Jeff Groves
From: Ruth Bromer
Subject: Re: [Boylan_Announce] Fwd: Meeker Invitation
In-Reply-To: <45379F25.3090806@krenim.org>
References: <45379F25.3090806@krenim.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed; x-avg-checked=avg-ok-516B3519
X-ELNK-Trace: 7b6ce422344b06e19c7f779228e2f6aeda0071232e20db4d98c2d59c9457941623c2bf07f0a75ef8350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 66.32.4.198
Received-SPF: none (hoover.krenim.org: domain of ruth@treklite.com does not designate permitted sender hosts)
X-Scanned-By: MIMEDefang 2.57 on 192.168.0.106

No attachment came through.

Ruth

At 11:52 AM 10/19/2006, you wrote:

>Forwarding for Charles Meeker:
>==============================
>
>
>-------- Original Message --------
>Subject: FW: Meeker Invitation
>Date: Thu, 19 Oct 2006 09:39:54 -0400
>From: Meeker, Charles C.
>
>
>Attached is an invitation for circulation to Boylan Heights residents.
>Please let me know if you have any questions. Thanks. - CCM
>
>[ ListServ admin note: Since the listserv strips-out attachments, Charles' ]
>[ attachment has been made available on the Boylan Heights ]
>[ web site at: http://www.boylanheights.org/articles/Invitation.pdf ]
>
>
>Charles C. Meeker, Esq.
>Parker Poe Adams & Bernstein LLP
>Wachovia Capitol Center
>150 Fayetteville Street, Suite 1400
>Post Office Box 389
>Raleigh, NC 27602-0389
>(919) 890-4168
>Fax: (919) 834-4564
>E-Mail: charlesmeeker@parkerpoe.com
>www.parkerpoe.com
>
>
>
> <>
>
>
>IRS CIRCULAR 230 NOTICE: To ensure compliance with requirements
>imposed by the IRS, we inform you that any U.S. federal tax advice
>contained in this communication (or in any attachment) is not
>intended or written to be used, and cannot be used, for the purpose
>of (i) avoiding penalties under the Internal Revenue Code or (ii)
>promoting, marketing or recommending to another party any
>transaction or matter addressed in this communication (or in any attachment).
>PRIVILEGED AND CONFIDENTIAL: This electronic message and any
>attachments are confidential property of the sender. The information
>is intended only for the use of the person to whom it was addressed.
>Any other interception, copying, accessing, or disclosure of this
>message is prohibited. The sender takes no responsibility for any
>unauthorized reliance on this message. If you have received this
>message in error, please immediately notify the sender and purge the
>message you received. Do not forward this message without permission.
>
>
>_______________________________________________
>Neighborhood Website:
> http://www.BoylanHeights.org
>Mail List Website (see past messages & make changes to your account:
> http://www.boylanheights.org/mailman/listinfo/neighborhood
>Send Mail to everyone on the list:
> Boylan_Announce@BoylanHeights.org
>To send a reply to an announcment use the
>Boylan_Discuss@BoylanHeights.org list.
>To send a response to just the person who sent the message:
> In your reply email, check the TO: field to make sure you are
> sending your message to the intended recipient!
>------------------
>Opinions Expressed on this listserv do not necessarily reflect those
>of the Boylan Heights Association or its officers.

Posted by Jeff at 12:58 AM | Comments (0)