Return-Path: <williamgull@bigfoot.com>
Received: from imap.bigfoot.com (root@imap.bigfoot.com [208.134.165.9])	
by tomcat.ns.net (8.8.5/8.8.5) with ESMTP id QAA06676	for <cpicket@ns.net>; 
Tue, 22 Sep 1998 16:12:16 -0700 (PDT)
Received: from randi.bigfoot ([208.134.165.30])	by imap.bigfoot.com (8.8.5/8.8.5) 
with SMTP id TAA02782	for <cpicket@ns.net>; Tue, 22 Sep 1998 19:06:19 -0400 (EDT)
Message-Id: <Version.32.19980922190557.02270810@imap.bigfoot.com>
X-Sender: williamgull@imap.bigfoot.com (Unverified)
X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0
Date: Tue, 22 Sep 1998 19:06:10 -0400
To: cpicket@ns.net (Chris Pickett)
From: William Gull <williamgull@bigfoot.com>
Subject: We've already killed him (was Re: Theft of service, one of 2:  Internet Casino Lottery - Enter at No Cost)
In-Reply-To: <b6af8847510b11d2a54900104b9f6371@4a6573737965.com>
References: <199809221516.IAA15539@tomcat.ns.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by tomcat.ns.net id QAA06676
X-UIDL: 633ca56f9fe85bac259ecacddb9d9d57
Status: RO

At 03:19 PM 9/22/98 +0000, you wrote:
>This message was originally sent to postmaster@bigfoot.com:
>
>This is consistent with my ZERO TOLERANCE policy on spam.
>
>connection.com:
>This spam did bounce off your mail server, and I suspect because one of
>your dial-up users chose to use this server to spam. Fix your server.
>Terminate this abuser and report back.
>
>SavState.edu:
>Your server was hijacked in order to send spam. Please fix your server
>and report back.
>
>Bigfoot:
>Terminate this drop box and report back. Thank you for your cooperation.
>
>
>Return-Path: <casinodollars@royal.net>
>Received: from tigerpaw.savstate.edu (tigerpaw.SavState.EDU
>[168.20.193.11]) by tomcat.ns.net (8.8.5/8.8.5) with ESMTP id
>XAA28822; Mon, 21 Sep 1998 23:22:41 -0700 (PDT)
>From: casinodollars@royal.net
>Received: from casino2 (connect6.connection.com [204.138.111.6] (may be
>forged)) by tigerpaw.savstate.edu (8.8.8/8.8.8) with SMTP id
>CAA02083; Tue, 22 Sep 1998 02:21:30 -0400 (EDT)
>Date: Tue, 22 Sep 1998 02:21:30 -0400 (EDT)
>Message-Id: <199809220621.CAA02083@tigerpaw.savstate.edu>
>Reply-To: OnlineCasino@bigfoot.com
>X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0
>Subject: Internet Casino Lottery - Enter at No Cost
>X-UIDL: 8b6d5a6a9080a7bd91f19ee27bf87309
>
>Enter at No Cost!
>
>The time has come to enjoy casino games from the comfort of your home.
>Find out where to play all of your favorite casino games online securely.
>Blackjack, Craps, Slot Machines, Roulette, Baccarat, Bingo & Much More!
>The
>best odds. Huge pay-outs. Top-Rated Customer Service.
>
>For more information, reply below IMMEDIATELY and you will be GUARANTEED
>TO RECEIVE between $25.00 and $10,000.00.  What better way to visit the
>best Casino's on the Internet?  Use their dollars and enjoy the best
>online
>Casino's the world has to offer.  If you enjoy Casino gaming then this is
>for you.  You need to reply today for more information and guaranteed
>acceptance.
>
>You must respond NOW at OnlineCasino@bigfoot.com and type
>"SHOW ME THE MONEY" in the Subject line of the message.
>
We are aware of the spammer that you complained about. In fact, we have
already
killed their Bigfoot account. Unfortunately, it looks like the person has
chosen not to change the Reply-to: address in their mail client, even though
mail sent to that address will never reach them.

If you wish to continue to try and get them shut down, it will require a
little
more work. You need to determine, from the spam's headers, the server the spam
actually originated from. Bigfoot has a page with some basic instructions for
this, as well as links to more comprehensive sites, at
<http://www.bigfoot.com/RUN?dyn=NoRef:20808&FN=FAQ_SPAMlocale=dnrver=1.0.0>
http://www.bigfoot.com/RUN?dyn=NoRef:20808&FN=FAQ_SPAMlocale=dnrver=1.0.0 .
You
can also check out the Spam FAQ at
<http://www.bluemarble.net/~scotty/forgery.html>http://www.bluemarble.net/~
scotty/forgery.html , or "Figuring Out Fake E-mail & News Posts":
<http://www.faqs.org/faqs/net-abuse-faq/spam-faq/index.html>http://www.faqs
.org/faqs/net-abuse-faq/spam-faq/index.html , or Spam: Where to Complain About
Frauds & Scams:
<http://www.elsop.com/wrc/complain.htm>http://www.elsop.com/wrc/complain.htm
. I
would also recommend taking a look at CAUCE's links, at
<http://www.cauce.org/resources.html>http://www.cauce.org/resources.html .