Return-Path: <williamgull@bigfoot.com>
Received: from imap.bigfoot.com (root@imap.bigfoot.com [208.134.165.9])	
by tomcat.ns.net (8.8.5/8.8.5) with ESMTP id QAA06453	for <cpicket@ns.net>; 
Tue, 22 Sep 1998 16:11:05 -0700 (PDT)
Received: from randi.bigfoot ([208.134.165.30])	by imap.bigfoot.com (8.8.5/8.8.5) 
with SMTP id TAA02493	for <cpicket@ns.net>; Tue, 22 Sep 1998 19:05:05 -0400 (EDT)
Message-Id: <Version.32.19980922170925.0173fd60@imap.bigfoot.com>
X-Sender: williamgull@imap.bigfoot.com (Unverified)
X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0
Date: Tue, 22 Sep 1998 17:09:36 -0400
To: Chris Pickett <cpicket@ns.net>
From: William Gull <williamgull@bigfoot.com>
Subject: We've already killed him (was Re: Second spamming run:  Internet Casino Lottery - Enter at No Cost)
In-Reply-To: <199809221527.IAA18716@tomcat.ns.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by tomcat.ns.net id QAA06453
X-UIDL: 7409d87ab0e2a34cb9378cbd508cd287
Status: RO

At 08:25 AM 9/22/98 -0800, you wrote:
>This is consistent with my ZERO TOLERANCE policy on spam. This is now the 
>SECOND this morning, part of obviously a second spamming run.
>
>
>Bigfoot:
>Please terminate this drop box and report back.
>
>scanlanhs.edu:
>Your server is being used for relaying. Please fix this problem as soon 
>as possible.
>
>Connection.com:
>Again, your network abuser is spamming via your network. Terminate their 
>service and report back.
>
>
>Return-Path: <casinodollars@royal.net>
>Received: from mail.scanlanhs.edu (mail.scanlanhs.edu [208.17.67.2]) by 
>tomcat.ns.net (8.8.5/8.8.5) with ESMTP id GAA16705; Tue, 22 Sep 1998 
>06:23:11 -0700 (PDT)
>From: casinodollars@royal.net
>Received: from casino2 (connect6.connection.com [204.138.111.6]) by 
>mail.scanlanhs.edu (8.8.5/8.8.5) with SMTP id JAA22979; Tue, 22 Sep 1998 
>09:02:09 -0400 (EDT)
>Date: Tue, 22 Sep 1998 09:02:09 -0400 (EDT)
>Message-Id: <199809221302.JAA22979@mail.scanlanhs.edu>
>Reply-To: VirtualCasino@bigfoot.com
>X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0
>Subject: Internet Casino Lottery - Enter at No Cost
>X-UIDL: 17a69748c41459d42857ed5bb76d48f6
>
>Enter at No Cost!
>
>The time has come to enjoy casino games from the comfort of your home.
>Find out where to play all of your favorite casino games online securely.
>Blackjack, Craps, Slot Machines, Roulette, Baccarat, Bingo & Much More! 
>The
>best odds. Huge pay-outs. Top-Rated Customer Service.
>
>For more information, reply below IMMEDIATELY and you will be GUARANTEED
>TO RECEIVE between $25.00 and $10,000.00.  What better way to visit the
>best Casino's on the Internet?  Use their dollars and enjoy the best 
>online
>Casino's the world has to offer.  If you enjoy Casino gaming then this is
>for you.  You need to reply today for more information and guaranteed
>acceptance.
>
>You must respond NOW at VirtualCasino@bigfoot.com and type
>"SHOW ME THE MONEY" in the Subject line of the message.
>
We are aware of the spammer that you complained about. In fact, we have
already
killed their Bigfoot account. Unfortunately, it looks like the person has
chosen not to change the Reply-to: address in their mail client, even though
mail sent to that address will never reach them.

If you wish to continue to try and get them shut down, it will require a
little
more work. You need to determine, from the spam's headers, the server the spam
actually originated from. Bigfoot has a page with some basic instructions for
this, as well as links to more comprehensive sites, at
<http://www.bigfoot.com/RUN?dyn=NoRef:20808&FN=FAQ_SPAMlocale=dnrver=1.0.0>
http://www.bigfoot.com/RUN?dyn=NoRef:20808&FN=FAQ_SPAMlocale=dnrver=1.0.0 .
You
can also check out the Spam FAQ at
<http://www.bluemarble.net/~scotty/forgery.html>http://www.bluemarble.net/~
scotty/forgery.html , or "Figuring Out Fake E-mail & News Posts":
<http://www.faqs.org/faqs/net-abuse-faq/spam-faq/index.html>http://www.faqs
.org/faqs/net-abuse-faq/spam-faq/index.html , or Spam: Where to Complain About
Frauds & Scams:
<http://www.elsop.com/wrc/complain.htm>http://www.elsop.com/wrc/complain.htm
. I
would also recommend taking a look at CAUCE's links, at
<http://www.cauce.org/resources.html>http://www.cauce.org/resources.html .