The server is the same as the Izzo message. The headers on the Izzo message showed it to originate from a Comcast customer in Walled Lake, whose computer name was EVAN. I would guess this is from the same computer, but the sender seems to have figured out how to remove the other info since then; this one shows "nobody" as the originator. Seems as though someone at MSU ought to be following up on this. ----- Original Message ----- From: "Ray Hernandez" <[log in to unmask]> To: <[log in to unmask]> Sent: Sunday, May 01, 2005 2:05 PM Subject: Re: [MSUNAG] FW: From the Office of the President Here is the telltale line from the headers: Received: from [65.254.46.197] (helo=server.dreamdorks.com) by sys18.mail.msu.edu Unless server.dreamdorks.com is somehow affiliated with MSU, I would say no it didn't originate from MSU. ;-) --Ray Harper, Chris wrote: > Yet another one... cannot tell if this one is originating from MSU > affiliated people or not... relayed through the same server as the Izzo > message, however. > > Chris Harper > STUDENT IT SPECIALIST > [log in to unmask] > Office: (517) 355-6611 x 103 > Cell: (616) 291-1987 > University Relations • Michigan State University > 1330 S. Harrison • East Lansing, MI 48823 > > -----Original Message----- > Microsoft Mail Internet Headers Version 2.0 > X-iHateSpam-Checked: Scanned by iHateSpam Server Edition. (5) > Received: from sys18.mail.msu.edu ([35.9.75.118]) by mail.ur.msu.edu with > Microsoft SMTPSVC(6.0.3790.1830); Sun, 1 May 2005 11:58:24 -0400 > Received: from [65.254.46.197] (helo=server.dreamdorks.com) by > sys18.mail.msu.edu with esmtps (Exim 4.44 #1) (TLSv1:AES256-SHA:256) id > 1DSGpr-0003wA-TS for [log in to unmask]; Sun, 01 May 2005 11:58:24 -0400 > Received: from nobody by server.dreamdorks.com with local (Exim 4.50) id > 1DSGpp-00036O-QH for [log in to unmask]; Sun, 01 May 2005 11:58:21 -0400 > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830 > To: <[log in to unmask]> > Subject: From the Office of the President > From: "George W. Bush" <[log in to unmask]> > Message-ID: <[log in to unmask]> > Date: Sun, 01 May 2005 11:58:21 -0400 > X-AntiAbuse: This header was added to track abuse, please include it with > any abuse report > X-AntiAbuse: Primary Hostname - server.dreamdorks.com > X-AntiAbuse: Original Domain - msu.edu > X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12] > X-AntiAbuse: Sender Address Domain - server.dreamdorks.com > X-Source: > X-Source-Args: > X-Source-Dir: > X-Virus: None found by Clam AV > Return-Path: <[log in to unmask]> > X-OriginalArrivalTime: 01 May 2005 15:58:24.0413 (UTC) > FILETIME=[9B0194D0:01C54E66] > > > Hey Young Americans, > > With our nation in crisis, I often like to think of more positive things. > For example, today is Char Schultz's birthday. Happy birthday, Char, from > all of us at the White House as well as Dick Cheney from his undisclosed > location. So if you see Char today, why don't you make our country a > little bit cheerier and say, "Happy Birthday." Good luck with your finals. > > I'm George W. Bush, and I approve this message. >