[Gllug] OT: Expedia sends out Spammer-style mail.

[Christopher Currie]

No, not their advertising (which you can switch off).

If respectable companies are doing what follows, where does it end? Why do 
they want to prevent their genuine customers replying? The mail was a notice 
of a revised itinerary, which I'd accepted by telephone.

The To: address is correct, but the From: and the Return-Path: are faked.

Should I be tightening up my SpamAssassin settings?

>X-Virus-Flag: no
 [snip]
> Return-Path: <me at ccurrie.net>
 [snip]
> Received: from smtp.expedia.com ([216.251.115.225] 
>helo=DNMTP02.dn.expeso.com)
 >      by uk2mxserver4-6.uk2.net with esmtp (Exim 4.54)
>        id 1F9Kh7-0007Ww-ON
 >       for me at ccurrie.net; Wed, 15 Feb 2006 11:19:38 +0000
> Received: from [10.1.6.241] ([10.1.10.249]unverified) by smtp.expedia.com 
>with InterScan Messaging Security Suite; Wed, 15 Feb 2006 03:10:23 -0800
 >Date: 15 Feb 06 03:10 -0800
> From: me at ccurrie.net
 >To: me at ccurrie.net
> Subject: Itinerary - [snip]
[snip]
 >X-SA-Exim-Connect-IP: 216.251.115.225
> X-SA-Exim-Mail-From: me at ccurrie.net
> X-SA-Exim-Scanned: No (on uk2mxserver4-6.uk2.net); SAEximRunCond expanded to 
> false
> Message-ID: <228kBoLkA1310M05 at cmsmail05.cms.usa.net>
[that's ok, it's correctly routed through there]
> X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on linux.ar7
 >X-Spam-Level: ***
 >X-Spam-Status: No, score=3.1 required=5.0 tests=HTML_90_100,HTML_MESSAGE,
    >    MIME_HTML_ONLY,MSGID_FROM_MTA_ID,NO_REAL_NAME autolearn=no 
    >    version=3.0.4
 
Christopher
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug