[clue-admin] FW: "Undeliverables" (clue server e-mail)

[Robert Harper]

I just saw this e-maill by Crawford on 7/9.  Looks like he was seeing the 
same thing.

Bob Harper
phone: (303) 368-7127
cell: (303) 596-3087
e-mail: harperrw77 at hotmail.com




>From: Crawford Rainwater <crawford.rainwater at linux-etc.com>
>Reply-To: crawford.rainwater at linux-etc.com
>To: postmaster at clue.denver.co.us
>Subject: "Undeliverables"
>Date: Thu, 25 Aug 2005 09:56:30 -0600
>MIME-Version: 1.0
>Received: from clue.denver.co.us ([71.39.22.65]) by mc11-f11.hotmail.com 
>with Microsoft SMTPSVC(6.0.3790.211); Thu, 25 Aug 2005 08:57:03 -0700
>Received: by clue.denver.co.us (Postfix)id 1E31444A3B; Thu, 25 Aug 2005 
>09:56:34 -0600 (MDT)
>Received: from omega.cr3cc.com (mail.linux-etc.com [10.0.30.67])by 
>clue.denver.co.us (Postfix) with ESMTP id ECF9A44A38for 
><postmaster at clue.denver.co.us>; Thu, 25 Aug 2005 09:56:33 -0600 (MDT)
>Received: from 10.0.10.50 (unknown [10.0.10.1])by omega.cr3cc.com (Postfix) 
>with ESMTP id CA5E8EC5Efor <postmaster at clue.denver.co.us>; Thu, 25 Aug 2005 
>09:56:31 -0600 (MDT)
>X-Message-Info: JGTYoYF78jHcmxRvtY2QkJZ9XXVqeHJYr31K4qsnTgo=
>Delivered-To: rwharper at cluedenver.org
>Organization: The Linux ETC Company
>X-Mailer: Evolution 2.0.2 (2.0.2-16) Return-Path: 
>crawford.rainwater at linux-etc.com
>X-OriginalArrivalTime: 25 Aug 2005 15:57:03.0810 (UTC) 
>FILETIME=[A2E18A20:01C5A98D]
>
>Jeff and company:
>
>If I am reading this correctly over the past few days, it seems some
>viral or malware email is coming off of the
>"president at clue.denver.co.us" account which I am guessing it being
>spoofed since we swapped over to "cluedenver.org".
>
>Any thoughts on this since the attachments are malware I suspect?  I
>have not done a detailed IP trace within these emails to see if there is
>a common source, but I suspect if we can find the originator IP and call
>their ISP with submitting these, things might be resolved.
>
>For reference, I still have a copy of most of these on my local machine
>here.
>
>--- Crawford
>--
>The Linux ETC Company
>368 South McCaslin Boulevard
>P.M.B. 146
>Louisville, CO 80027 USA
>+1 (303) 604-2550 (voice)
>+1 (866) 604-2550 (toll free within the US)
>+1 (303) 664-0036 (fax)
>http://www.linux-etc.com
>


_______________________________________________
CLUE-admin mailing list
CLUE-admin at cluedenver.org
http://cluedenver.org/mailman/listinfo/clue-admin