Print

Print


The server is the same as the Izzo message. The headers on the Izzo message
showed it to originate from a Comcast customer in Walled Lake, whose
computer name was EVAN. I would guess this is from the same computer, but
the sender seems to have figured out how to remove the other info since
then; this one shows "nobody" as the originator. Seems as though someone at
MSU ought to be following up on this.

----- Original Message -----
From: "Ray Hernandez" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Sunday, May 01, 2005 2:05 PM
Subject: Re: [MSUNAG] FW: From the Office of the President


Here is the telltale line from the headers:

Received: from [65.254.46.197] (helo=server.dreamdorks.com) by
sys18.mail.msu.edu

Unless server.dreamdorks.com is somehow affiliated with MSU, I would say
no it didn't originate from MSU. ;-)
--Ray

Harper, Chris wrote:
> Yet another one... cannot tell if this one is originating from MSU
> affiliated people or not... relayed through the same server as the Izzo
> message, however.
>
> Chris Harper
> STUDENT IT SPECIALIST
> [log in to unmask]
> Office: (517) 355-6611 x 103
> Cell: (616) 291-1987
> University Relations • Michigan State University
> 1330 S. Harrison • East Lansing, MI 48823
>
> -----Original Message-----
> Microsoft Mail Internet Headers Version 2.0
> X-iHateSpam-Checked: Scanned by iHateSpam Server Edition. (5)
> Received: from sys18.mail.msu.edu ([35.9.75.118]) by mail.ur.msu.edu with
> Microsoft SMTPSVC(6.0.3790.1830); Sun, 1 May 2005 11:58:24 -0400
> Received: from [65.254.46.197] (helo=server.dreamdorks.com) by
> sys18.mail.msu.edu with esmtps (Exim 4.44 #1) (TLSv1:AES256-SHA:256) id
> 1DSGpr-0003wA-TS for [log in to unmask]; Sun, 01 May 2005 11:58:24 -0400
> Received: from nobody by server.dreamdorks.com with local (Exim 4.50) id
> 1DSGpp-00036O-QH for [log in to unmask]; Sun, 01 May 2005 11:58:21 -0400
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
> To: <[log in to unmask]>
> Subject: From the Office of the President
> From: "George W. Bush" <[log in to unmask]>
> Message-ID: <[log in to unmask]>
> Date: Sun, 01 May 2005 11:58:21 -0400
> X-AntiAbuse: This header was added to track abuse, please include it with
> any abuse report
> X-AntiAbuse: Primary Hostname - server.dreamdorks.com
> X-AntiAbuse: Original Domain - msu.edu
> X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
> X-AntiAbuse: Sender Address Domain - server.dreamdorks.com
> X-Source:
> X-Source-Args:
> X-Source-Dir:
> X-Virus: None found by Clam AV
> Return-Path: <[log in to unmask]>
> X-OriginalArrivalTime: 01 May 2005 15:58:24.0413 (UTC)
> FILETIME=[9B0194D0:01C54E66]
>
>
> Hey Young Americans,
>
> With our nation in crisis, I often like to think of more positive things.
> For example, today is Char Schultz's birthday. Happy birthday, Char, from
> all of us at the White House as well as Dick Cheney from his undisclosed
> location. So if you see Char today, why don't you make our country a
> little bit cheerier and say, "Happy Birthday." Good luck with your finals.
>
> I'm George W. Bush, and I approve this message.
>