[NIFL-FOBASICS:1147] Spoofing list mail

From: Barbara Garner (barbara_garner@worlded.org)
Date: Thu Oct 21 2004 - 08:51:53 EDT


Return-Path: <nifl-fobasics@literacy.nifl.gov>
Received: from literacy (localhost [127.0.0.1]) by literacy.nifl.gov (8.10.2/8.10.2) with SMTP id i9LCpra27346; Thu, 21 Oct 2004 08:51:53 -0400 (EDT)
Date: Thu, 21 Oct 2004 08:51:53 -0400 (EDT)
Message-Id: <s1777783.018@mail.jsi.com>
Errors-To: listowner@literacy.nifl.gov
Reply-To: nifl-fobasics@literacy.nifl.gov
Originator: nifl-fobasics@literacy.nifl.gov
Sender: nifl-fobasics@literacy.nifl.gov
Precedence: bulk
From: "Barbara Garner" <barbara_garner@worlded.org>
To: Multiple recipients of list <nifl-fobasics@literacy.nifl.gov>
Subject: [NIFL-FOBASICS:1147] Spoofing list mail
X-Listprocessor-Version: 6.0c -- ListProcessor by Anastasios Kotsikonas
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
X-Mailer: Novell GroupWise Internet Agent 6.5.1 
Status: O
Content-Length: 812
Lines: 23

Hello all,
It looks like someone or something is once again spoofing our list's
email
addresses and sending viruses to a few of our subscribers. (meaning our
address shows up in the "from" box, but it did not come from our server)


Official NIFL list email should have the list name capitalized within
straight brackets (example [NIFL-ESL: 1234] or [NIFL-PLI]) in the
subject
line of all NIFL list emails. If the subject line does not contain this
text, it is probably a "spoofed" email that may contain a virus or a
link to
a virus or spyware and should be deleted. 

(Please note: The Numeracy list is an exception. List emails from the
Numeracy list do not have the list name in straight brackets. It comes
from
a different kind of mailing list server with different settings.)

Barb Garner,
list moderator



This archive was generated by hypermail 2b30 : Thu Dec 23 2004 - 09:47:18 EST