Am I sending spam?

japplejapple
Posted:
in Genius Bar edited January 2014
Hi all,



I heard addresses can be spoofed (or some term like that) so maybe that's what happened to me.



I got the following email (shown in raw source) that looks like I sent an email with the subject line "Somebody told you that blow-job enlarges your penis" !!! YUCK!



Thoughts?

Thanks!



Quote:

From [email protected] Tue Jul 11 10:29:53 2006

X-Apparently-To: [email protected] via 206.190.49.4; Tue, 11 Jul 2006 04:58:27 -0700

X-Originating-IP: [64.12.138.21]

Authentication-Results: mta148.mail.re4.yahoo.com

from=aol.com; domainkeys=neutral (no sig)

Received: from 64.12.138.21 (EHLO omr-m09.mx.aol.com) (64.12.138.21)

by mta148.mail.re4.yahoo.com with SMTP; Tue, 11 Jul 2006 04:58:27 -0700

Received: from rly-yb05.mx.aol.com (rly-yb05.mail.aol.com [172.18.205.137]) by omr-m09.mx.aol.com (v107.10) with ESMTP id RELAYIN6-744b3925638; Tue, 11 Jul 2006 07:58:14 -0400

Received: from localhost (localhost)

by rly-yb05.mx.aol.com (8.8.8/8.8.8/AOL-5.0.0)

with internal id HAB04419;

Tue, 11 Jul 2006 07:58:14 -0400 (EDT)

Date: Tue, 11 Jul 2006 07:58:14 -0400 (EDT)

From: Mail Delivery Subsystem <[email protected]>

Message-Id: <[email protected]>

To: <[email protected]>

MIME-Version: 1.0

Content-Type: multipart/report; report-type=delivery-status;

boundary="HAB04419.1152619094/rly-yb05.mx.aol.com"

Subject: Returned mail: User unknown

Auto-Submitted: auto-generated (failure)

X-AOL-IP: 172.18.205.137







This is a MIME-encapsulated message



--HAB04419.1152619094/rly-yb05.mx.aol.com



The original message was received at Tue, 11 Jul 2006 07:58:07 -0400 (EDT)

from ppp6825.hakata04.bbiq.jp [58.3.90.221]





*** ATTENTION ***



Your e-mail is being returned to you because there was a problem with its

delivery. The address which was undeliverable is listed in the section

labeled: "----- The following addresses had permanent fatal errors -----".



The reason your mail is being returned to you is listed in the section

labeled: "----- Transcript of Session Follows -----".



The line beginning with "<<<" describes the specific reason your e-mail could

not be delivered. The next line contains a second error message which is a

general translation for other e-mail servers.



Please direct further questions regarding this message to your e-mail

administrator.



--AOL Postmaster







----- The following addresses had permanent fatal errors -----

<[email protected]>



----- Transcript of session follows -----

... while talking to air-yb02.mail.aol.com.:

>>> RCPT To:<[email protected]>

<<< 550 MAILBOX NOT FOUND

550 <[email protected]>... User unknown



--HAB04419.1152619094/rly-yb05.mx.aol.com

Content-Type: message/delivery-status



Reporting-MTA: dns; rly-yb05.mx.aol.com

Arrival-Date: Tue, 11 Jul 2006 07:58:07 -0400 (EDT)



Final-Recipient: RFC822; [email protected]

Action: failed

Status: 5.1.1

Remote-MTA: DNS; air-yb02.mail.aol.com

Diagnostic-Code: SMTP; 550 MAILBOX NOT FOUND

Last-Attempt-Date: Tue, 11 Jul 2006 07:58:14 -0400 (EDT)



--HAB04419.1152619094/rly-yb05.mx.aol.com

Content-Type: text/rfc822-headers



Received: from mailin-02.mx.aol.com (ppp6825.hakata04.bbiq.jp [58.3.90.221]) by rly-yb05.mx.aol.com (v110.15) with ESMTP id MAILRELAYINYB510-1a444b3924e1c2; Tue, 11 Jul 2006 07:58:06 -0400

Received: from mx3.mail.yahoo.com

by ppp6825.hakata04.bbiq.jp (8.9.3/8.9.3) with ESMTP id GH7EDLm9iSaQ1

for <[email protected]>; Fri, 28 Oct 2005 12:01:29 -0300

Received: from [93.4.212.198]

by mx3.mail.yahoo.com with ESMTP (8.12.11/8.12.11) id fyuiQiQsDY0MI

for <[email protected]>; Fri, 28 Oct 2005 11:58:26 -0300

Reply-to: "[email protected]" <[email protected]>

From: "[email protected]" <[email protected]>

Date: Fri, 28 Oct 2005 11:54:38 -0300

Message-ID: [email protected]

To: [email protected]

Content-type: text/html;

Charset=Windows-1251

Subject: Somebody told you that blow-job enlarges your penis

MIME-Version: 1.0

X-AOL-IP: 58.3.90.221

X-AOL-SCOLL-SCORE: 0:2:441683588:20401094

X-AOL-SCOLL-URL_COUNT: 0



--HAB04419.1152619094/rly-yb05.mx.aol.com--




Comments

  • Reply 1 of 7
    shetlineshetline Posts: 4,695member
    It's trivially easy to use any e-mail address you like as the "from" address for an e-mail. Spammers routinely use e-mail addresses they've scavenged from elsewhere as the supposed sender of a spam message. It doesn't mean that your computer itself is sending out the spam.



    It is possible for your computer to be hijacked into actually broadcasting spam -- but that's far less likely if you're running a Mac and not a PC. Even if someone does turn your computer into a spambot zombie, the outgoing spam wouldn't necessarily bear your e-mail address as the sender.
  • Reply 2 of 7
    lundylundy Posts: 4,466member
    Quote:

    Originally posted by jApple

    Hi all,



    I heard addresses can be spoofed (or some term like that) so maybe that's what happened to me.



    I got the following email (shown in raw source) that looks like I sent an email with the subject line "Somebody told you that blow-job enlarges your penis" !!! YUCK!



    Thoughts?

    Thanks!



    It's called a Joe Job. http://members.cox.net/joejob/
  • Reply 3 of 7
    shetlineshetline Posts: 4,695member
    Quote:

    Originally posted by lundy

    It's called a Joe Job. http://members.cox.net/joejob/



    Perhaps you should make it clear that "Joe Job" refers to the spamming method, and not to the aforementioned penis enlargement technique.
  • Reply 4 of 7
    regreg Posts: 832member
    If you want to check what is going out try Little Snitch . I use to use this and it let me know all the times Adobe was getting info from my machines. After a couple of months with only the expected outgoing connections I stopped using it. It is good for that piece of mind.



    reg
  • Reply 5 of 7
    lundylundy Posts: 4,466member
    Quote:

    Originally posted by shetline

    Perhaps you should make it clear that "Joe Job" refers to the spamming method, and not to the aforementioned penis enlargement technique.



    Ahhhh.. Joe Job, Blow Job, whatever --- let's not get carried away with the details...
  • Reply 6 of 7
    japplejapple Posts: 91member
    Thank you all for the info/help!

    -J
  • Reply 7 of 7
    japplejapple Posts: 91member
    Quote:

    Originally posted by reg

    If you want to check what is going out try Little Snitch . I use to use this and it let me know all the times Adobe was getting info from my machines. After a couple of months with only the expected outgoing connections I stopped using it. It is good for that piece of mind.



    reg



    Stupid question: how can I use this to tell if I'm sending spam?

    Thanks!

    -J
Sign In or Register to comment.