Li'l Abner wrote:

> The spam I got from him had his own return email address, as did the others
> who complained to him. How would they have known who to complain to if it
> didn't come from his email address. You think his neighbor's machines would
> send out email with *his* return address?

As a general rule, the vast majority of spam sourced from the zombies
does *not* have the From of the computer which sourced the spam.

You do not determine the source of a spam from the From. You determine
the source of a spam by carefully examining the headers to determine the
source IP.

The small minority of spam which comes from a mail account in which the
From actually *does* represent th source of the spam comes from cracked
webmail passwords, so the source of the spam in those cases is the
From's webmail account.

In such a case the machine in question is not the source of the webmail.

As a general rule, except for the cracked webmail account example above,
the source of a spam is *not* the From.


--
Mike Easter