On Thu, Aug 19, 2004 at 06:33:03AM -0300, Lic. Edgar J. De Cleene wrote:
> I receive the second of weird messages what seems one virus
> How is directed from what seems valid list address , I copy header here.

    SMTP clients can lie about the from address with no problem whatsoever,
which is why the other headers allow you to track things like the originating
IP address. This does not mean that lists.squeakfoundation.org has been
compromised.

> X-Apparently-To: edgardec2001 at yahoo.com.ar via 206.190.38.91; Wed, 18 Aug
> 2004 11:52:35 -0700
> X-YahooFilteredBulk: 212.253.56.233
> X-Originating-IP: [212.253.56.233]
> Return-Path: <squeak-dev at lists.squeakfoundation.org>
> Received: from 212.253.56.233  (HELO magicturkey.net) (212.253.56.233)
>   by mta348.mail.scd.yahoo.com with SMTP; Wed, 18 Aug 2004 11:52:35 -0700
> Date: Wed, 18 Aug 2004 21:51:40 +0200
> To: "Edgardec" <edgardec2001 at yahoo.com.ar>
> From: "Squeak-dev" <squeak-dev at lists.squeakfoundation.org>
> Subject: RE: Text message
> Message-ID: <ltlycghzwjfthuroacn at yahoo.com.ar>
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
> 
> Have an attached named Half_Life.hta, what I don't open.
> Someone could comment about this ?
> Any virus politic different of do not open attachments ?
> 
> Edgar
> 
>