Interestingly enough, the address belongs to a Canadian dial-up user. Even if I did run my domain's mailserver, the address would be pointless to block as it's just a dynamic. Ah well, not too much can be done about it. Yay for SpamAssassin+clamav. 117.168.231.64.in-addr.arpa name = HSE-London-ppp289372.sympatico.ca On Tue, 2004-03-30 at 17:05, Bill Earl wrote: > Bryce, > > What's the IP address of the sending computer? (the original real source > from the headers, not the probably faked original domain name and address > that the current crop are tucking into the headers). > > Let's out the slackards who are leaving their systems open like this! :-/ > > Bill > > ----- Original Message ----- > From: "Bryce C" > To: "PLUG" > Sent: Tuesday, March 30, 2004 4:49 PM > Subject: Re: Someone here is infected > > > > > --------------------------------------------------- > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us > To subscribe, unsubscribe, or to change you mail settings: > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss -- Bryce C CoBryce Communications