All you have to do is wait till the next time you get some unsolicted e-mail/spam and reply to the spammer and the contacts for every domain listed in the header. Yes, we know that the providers in the headers didn't send you the spam (usually). But, they are getting paid to let someone harass you. And if that spammer becomes enough of a pain in their rear, they'll tell the spammer to find a new provider. Eventually, the providers will get tired of this and terminate the accounts of the people harassing us all. Even if you just reply to the spammer, the spammer will be inundated with mail and unable to cope. Could you deal with millions (or even a few thousands) of e-mail messages tomorrow when you log on? If they list an 800 number, be sure to call - as often as required ;-) And use TPC to fax them via the Internet as well.
Here's the ~technical details of looking at e-mail headers:
For each domain, reply to the postmaster or administrator of the sender, by mailing to: postmaster@<domainname> where <domainname> is the domain of the spammer sending the email.
To determine the server where a forged email originated, check the last (generally, the first in your e-mail header) received line of the mail. As an example:
> Received: from mailhost.cyberpromo.com(cyberpromo.com (relay.cybermirror1.com(204.137.223.241)) by
> cybermirror1.com (8.8.5/8.6.5) with SMTP id GAA02542 for <cdr2@t3-com.com
>;
> Sun, 06 Sep 1997 19:30:51 -0600 (EST)
The first machine named is generally the source of the email, in this example:
relay.cybermirror1.com
Notice that the first name listed (mailhost.cyberpromo.com) appears to be a fake name, the real name (and IP address) are the ones in parenthesis, looked up by your DNS server. Always use the values in parenthesis, it's easy to forge the others.
Generally, only the last two words of the address are the domain, in this example, cybermirror1.com.
You can then enter the domain name into the form at the InterNIC's URL:
to see if it is a valid site, and if it is, you can send your complaints to the contacts listed there. If you still have problems, check with your ISP's technical support for an alternative, or look on our anti-spam web page links at: