Return-Path: <kevin@saix.net>
Received: from igubu.saix.co.za (igubu.saix.net [196.25.1.1])	
by tomcat.ns.net (8.8.5/8.8.5) with ESMTP id HAA09876	for <cpicket@ns.net>; 
Wed, 28 Oct 1998 07:41:05 -0800 (PST)
Received: from kevin ([196.25.13.34]) by igubu.saix.co.za
          (Post.Office MTA v3.1.2 release (PO203-101c)
          ID# 0-44223U5000L500S0) with SMTP id AAA10346;
          Wed, 28 Oct 1998 17:40:53 +0200
From: "Kevin van Blerk" <kevin@saix.net>
Organization: SAIX
To: Chris Pickett <cpicket@ns.net>
Date: Wed, 28 Oct 1998 17:41:56 +0200
MIME-Version: 1.0
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT
Subject: Re: SPAM!: Hey!
Reply-to: kevin@saix.net
CC: abuse@uu.net
Priority: normal
In-reply-to: <199810280417.UAA16786@tomcat.ns.net>
X-mailer: Pegasus Mail for Win32 (v3.01b)
Message-ID: <19981028154052.AAA10346@kevin>
X-UIDL: 0976eaef610460cf7835d5523cf53a64

Thank you for informing us of this spammer, it seems that the originator
has forged the header and made it look as though the spam originated from the
saix.net domain but in fact it merely confused our mail server into accepting
the mail as originating from saix.net and was thus forwarded on. The reply 
e-Mail address doesn't exist either.

The ipaddress that appears in the header "153.37.n.n" doesn't belong to us but
in fact UU.NET. I am Cc'ng this to them for further attention and hopefully they
can track down the culprit.

This spammer in fact brought our mail server to it's knees with this activity
and we would appreciate that the culprit gets his butt kicked good and solid.

We have since blocked access from this address.

Thank you

Kevin van Blerk
SAIX Abuse Administrator
abuse@saix.net

Name:    1Cust70.tnt5.lax3.da.uu.net
Address:  153.37.66.70

eg. of such a header below

>Received: from foo by m-ih-exchange.intelihealth.com with SMTP (Microsoft
>Exchange Internet Mail Service Version 5.0.1460.8)
>	id VBF6XKRK; Wed, 28 Oct 1998 01:11:17 -0500
>Return-Path: <mark@igubu.saix.net>
>Received: from igubu.saix.co.za (igubu.saix.net [196.25.1.1])
>	by foo.intelihealth.com (8.8.8/8.8.8) with ESMTP id BAA10949;
>	Wed, 28 Oct 1998 01:08:26 -0500 (EST)
>Received: from mail.saix.net ([153.37.66.70]) by igubu.saix.co.za
>          (Post.Office MTA v3.1.2 release (PO203-101c)
>          ID# 0-44223U5000L500S0) with SMTP id AAL28920;
>          Wed, 28 Oct 1998 08:07:00 +0200
>Received: from   by  (8.8.5/8.6.5) with SMTP id GAA02208 for
><tech@systemhelp.mx>; Tue, 27 Oct 1998 22:00:13 -0600 (EST)


Subject:        	SPAM!: Hey!
Date sent:      	Tue, 27 Oct 98 20:17:28 -0800
From:           	Chris Pickett <cpicket@ns.net>
To:             	<abuse@saix.net>, <postmaster@saix.net>, <fraud@uu.net>,
       	<spam-complaint@uu.net>, <security@uu.net>

> This is consistent with my ZERO TOLERANCE policy on spam. This will be 
> posted to news.admin.net-abuse.sightings.
> 
> SAIX.NET:
> Please secure your server against relaying and report back.
> 
> UU.Net:
> One of your spammers in dire need of termination. Terminate this spammer 
> and report back.
> 
> 
> Return-Path: <stan@igubu.saix.net>
> Received: from igubu.saix.co.za (igubu.saix.net [196.25.1.1])	by 
> tomcat.ns.net (8.8.5/8.8.5) with ESMTP id TAA10203;	Tue, 27 Oct 1998 
> 19:45:39 -0800 (PST)
> Received: from mail.saix.net ([153.37.75.68]) by igubu.saix.co.za         
>  (Post.Office MTA v3.1.2 release (PO203-101c)          ID# 
> 0-44223U5000L500S0) with SMTP id AAI14895;          Wed, 28 Oct 1998 
> 05:45:21 +0200
> Received: from   by  (8.8.5/8.6.5) with SMTP id GAA05538 for 
> <tech@systemhelp.mx>; Tue, 27 Oct 1998 19:44:06 -0600 (EST)
> To: tech@systemhelp.mx
> Message-ID: < >
> Date: Tue, 27 Oct 98 19:44:06 EST
> From: stan@jbsenergy.com
> Subject: Hey!
> Reply-To: tech@systemhelp.mx
> X-UIDL: 240439951e78cff39a6cbefc529fd61e
> 
> SSE Daily Specials
> 
> ====================
> Products Featured:
> 
> 1. Scanport 36 Bit Flatbed Color Scanner.  $56 After Rebate
> 2. Lexmark Model 1100 Color Inkjet Printer. $89 After Rebate
> 3. Ezonics EZCam USB Digital Video Camera. $99
> 4. High Performance Video Capture Card with TV Tuner and Remote
> Control.  $72
> 5. Futura Model 7031 17" XGA Color Monitor, 3 Year Warranty. $239
> 6. PowerCom KIN525AP Line Interactive UPS System. $129
> 
>  If you have questions about the products  offered in this special
> please
>  contact us at <<mailto:sse111@yahoo.com>>  
> ===================
> 1. Have you ever wanted a Quality Scanner for your PC compatible
> computer?
> How about a 36 Bit Color Flatbed Scanner for only $56. (After $30
> Rebate)
> This scanner is capable of detecting over 1 Billion different colors and
> can also scan OCR text documents.
> 
> Everything you need for years of great scanning is included, Scanner,
> Software,
> documentation and cables.
> 
> Easy to Install, just plug into your systems printer port then plug your
> printer into the scanners expansion port.
> 
> Click on the address below for more information or to Order
> http://www.store.yahoo.com/second/scan20scan.html
> ==========================
> 
> 2. Now that your scanning in those great pictures you will need a color
> printer
> to print them out on.
> We have the Lexmark 1100 Color Inkjet Printer for $89. (After $30
> Rebate)
> This unit has Resolution of upto 600 x 600 dpi.
> 
> Click on the address below for more information or to Order
> http://www.store.yahoo.com/second/lex11colin.html
> =========================
> 
> 3. Speaking of pictures how about a Ezonics EZCam USB Digital Video
> Camera.
> With this camera you can do Video Conderencing and Video Email. You know
> what they say "a picture is worth a thousand words. Only $99.00
> 
> Click on the address below for more information or to Order
> http://www.store.yahoo.com/second/ezusbdigcam.html
> ================================
> 
> 4. Watch TV while you use your computer. Capture video and audio from
> your favorite shows and movies. Capture video from your home video
> camera.
> Comes with TV Tuner/Capture Card and Remote Control, Software and
> Cables.
> Easy to Install. Only $72.00 
> 
> Click on the address below for more information or to Order
> http://www.store.yahoo.com/second/tvcapturer.html
> ================================
> 
> New Arrivals
> ===========
> 
> 5. 17" XGA Color Monitor (16.1" Viewable area) Digital Controls with
> "On Screen Status Display" 3 Year Warranty. Only $239.00
> 
> Click on the address below for more information or to Order
> http://www.store.yahoo.com/second/fut7017colmo.html
> ===============================
> 
> 6. PowerCom KIN525AP Line Interactive UPS System.
> Don't let winter storms crash your system, protect it with
> this UPS System. Only $129
> 
> Click on the address below for more information or to Order
> http://www.store.yahoo.com/second/powkin.html
> 
> 
> Thank You Very much for your time.
> 
> Dave Gaither
> SSE
>