|
Following up with Ray's message... the server.dreamdorks.com is not affiliated with MSU, however I am under the assumption it is a person affiliated with MSU that is relaying messages via this server, being that the Izzo message was relayed through it as well as this message making reference to "finals" in the Bush message.
It would seem that the abuse information provided by dreamdorks's servers in the headers could be used to report these instances.
Chris Harper
STUDENT IT SPECIALIST
[log in to unmask]
Office: (517) 355-6611 x 103
Cell: (616) 291-1987
University Relations • Michigan State University
1330 S. Harrison • East Lansing, MI 48823
-----Original Message-----
From: MSU Network Administrators Group [mailto:[log in to unmask]] On Behalf Of Chris Wolf
Sent: Sunday, May 01, 2005 2:36 PM
To: [log in to unmask]
Subject: Re: [MSUNAG] FW: From the Office of the President
The server is the same as the Izzo message. The headers on the Izzo message
showed it to originate from a Comcast customer in Walled Lake, whose
computer name was EVAN. I would guess this is from the same computer, but
the sender seems to have figured out how to remove the other info since
then; this one shows "nobody" as the originator. Seems as though someone at
MSU ought to be following up on this.
----- Original Message -----
From: "Ray Hernandez" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Sunday, May 01, 2005 2:05 PM
Subject: Re: [MSUNAG] FW: From the Office of the President
Here is the telltale line from the headers:
Received: from [65.254.46.197] (helo=server.dreamdorks.com) by
sys18.mail.msu.edu
Unless server.dreamdorks.com is somehow affiliated with MSU, I would say
no it didn't originate from MSU. ;-)
--Ray
Harper, Chris wrote:
> Yet another one... cannot tell if this one is originating from MSU
> affiliated people or not... relayed through the same server as the Izzo
> message, however.
>
> Chris Harper
> STUDENT IT SPECIALIST
> [log in to unmask]
> Office: (517) 355-6611 x 103
> Cell: (616) 291-1987
> University Relations • Michigan State University
> 1330 S. Harrison • East Lansing, MI 48823
>
> -----Original Message-----
> Microsoft Mail Internet Headers Version 2.0
> X-iHateSpam-Checked: Scanned by iHateSpam Server Edition. (5)
> Received: from sys18.mail.msu.edu ([35.9.75.118]) by mail.ur.msu.edu with
> Microsoft SMTPSVC(6.0.3790.1830); Sun, 1 May 2005 11:58:24 -0400
> Received: from [65.254.46.197] (helo=server.dreamdorks.com) by
> sys18.mail.msu.edu with esmtps (Exim 4.44 #1) (TLSv1:AES256-SHA:256) id
> 1DSGpr-0003wA-TS for [log in to unmask]; Sun, 01 May 2005 11:58:24 -0400
> Received: from nobody by server.dreamdorks.com with local (Exim 4.50) id
> 1DSGpp-00036O-QH for [log in to unmask]; Sun, 01 May 2005 11:58:21 -0400
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
> To: <[log in to unmask]>
> Subject: From the Office of the President
> From: "George W. Bush" <[log in to unmask]>
> Message-ID: <[log in to unmask]>
> Date: Sun, 01 May 2005 11:58:21 -0400
> X-AntiAbuse: This header was added to track abuse, please include it with
> any abuse report
> X-AntiAbuse: Primary Hostname - server.dreamdorks.com
> X-AntiAbuse: Original Domain - msu.edu
> X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
> X-AntiAbuse: Sender Address Domain - server.dreamdorks.com
> X-Source:
> X-Source-Args:
> X-Source-Dir:
> X-Virus: None found by Clam AV
> Return-Path: <[log in to unmask]>
> X-OriginalArrivalTime: 01 May 2005 15:58:24.0413 (UTC)
> FILETIME=[9B0194D0:01C54E66]
>
>
> Hey Young Americans,
>
> With our nation in crisis, I often like to think of more positive things.
> For example, today is Char Schultz's birthday. Happy birthday, Char, from
> all of us at the White House as well as Dick Cheney from his undisclosed
> location. So if you see Char today, why don't you make our country a
> little bit cheerier and say, "Happy Birthday." Good luck with your finals.
>
> I'm George W. Bush, and I approve this message.
>
|
