[CLUE-Admin] Re: CLUE-Tech post from admin@clue.denver.co.us requires approval

[Lynn Danielson]

Jed S. Baer wrote:

>Lynn Danielson <lynnd at techangle.com> wrote:
>  
>
>>Received: from localhost ([142.3.208.203])
>>Date: Mon, 4 Aug 2003 16:51:16 -0600
>>Message-Id: <200308042251.QAA10218 at clue.denver.co.us>
>>From: admin at clue.denver.co.us
>>X-Mailer: The Bat! (v1.61)
>>    
>>
>
>Just a note, in case anyone's interested, 142.3.208.203 is the University
>of Regina, Canada.
>
>If that's the only "Received:" header, then it would appear that someone
>has direct access to their network, and is using "The Bat!" in its MTA
>mode (Unless there are other "Received:" headers). The "From:" header is
>simply spoofed.
>
>Are there many of these (i.e. from that IP address or the uregina.ca
>domain)?
>

I've received a few over the last couple of days.  'Doesn't constitute 
many, just more than I'd like.
I know I deleted a couple, but I think I may still have another example 
or two if you're interested.
They were not obviously related: different received ip's, different 
subject and text.  I suspect that
Jeff and anyone else in the clue-tech-admin group got them as well.

Lynn