AF:
NF:0
PS:10
SRH:1
SFN:
DSR:
MID:
CFG:
PT:0
S:andy.sharp@lsi.com
RQ:
SSV:mhbs.lsil.com
NSV:
SSH:
R:<Robert.England@lsi.com>,<Caeli.Collins@lsi.com>,<Brian.Stark@lsi.com>,<Richard.Hardiman@lsi.com>,<Peggy.Vanhavermaat@lsi.com>,<Christopher.Brockway@lsi.com>,<Rich.LaReau@lsi.com>,<Char.Holderby@lsi.com>,<Colleen.Polek@lsi.com>,<Rich.Miller@lsi.com>
MAID:2
X-Sylpheed-Privacy-System:
X-Sylpheed-Sign:0
SCF:#mh/Mailbox/sent
RMID:#imap/LSI/INBOX	0	7C44B44C1DCF8E4197AF0A1EF03A1DD832CCCA23@PALMAIL01.lsi.com
X-Sylpheed-End-Special-Headers: 1
Date: Tue, 1 Dec 2009 11:40:40 -0800
From: Andrew Sharp <andy.sharp@lsi.com>
To: "England, Robert (Robert)" <Robert.England@lsi.com>
Cc: "Collins, Caeli" <Caeli.Collins@lsi.com>, "Stark, Brian"
 <Brian.Stark@lsi.com>, Richard Hardiman <Richard.Hardiman@lsi.com>,
 "Vanhavermaat, Peggy" <Peggy.Vanhavermaat@lsi.com>, "Brockway, Christopher
 (Christopher)" <Christopher.Brockway@lsi.com>, "LaReau, Rich"
 <Rich.LaReau@lsi.com>, "Holderby, Char" <Char.Holderby@lsi.com>, "Polek,
 Colleen (Colleen)" <Colleen.Polek@lsi.com>, "Miller, Richard K (Rich)"
 <Rich.Miller@lsi.com>
Subject: Re: Spam
Message-ID: <20091201114040.05fb00e6@ripper.onstor.net>
In-Reply-To: <7C44B44C1DCF8E4197AF0A1EF03A1DD832CCCA23@PALMAIL01.lsi.com>
References: <E1EC65251D4B3D46BBC0AAA3C0629222AFEEDD60@cosmail02.lsi.com>
	<7C44B44C1DCF8E4197AF0A1EF03A1DD832CCC9F8@PALMAIL01.lsi.com>
	<E1EC65251D4B3D46BBC0AAA3C0629222AFF7529B@cosmail02.lsi.com>
	<7C44B44C1DCF8E4197AF0A1EF03A1DD832CCCA15@PALMAIL01.lsi.com>
	<5D3F3304755C724285AA5789BA159920042E8EE9@cosmail03.lsi.com>
	<D6A03483DE0CD6469A79007DEE7297C25F2482AC@PALMAIL01.lsi.com>
	<7C44B44C1DCF8E4197AF0A1EF03A1DD832CCCA23@PALMAIL01.lsi.com>
Organization: LSI
X-Mailer: Sylpheed-Claws 2.6.0 (GTK+ 2.8.20; x86_64-pc-linux-gnu)
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="MP__hD0gHRtOS/45h8B1HDph=8"

--MP__hD0gHRtOS/45h8B1HDph=8
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

I'm receiving more spam than ever.  Attached is one that came today --
clearly going through postini.  In addition, I'm receiving spam
addressed to other people.  Did you guys hook up the spam filter in
reverse or something?  Hmm, maybe this is some kind of IT revenge.
Yeah, I guess I deserve it.  C'est la vie.


On Mon, 30 Nov 2009 13:42:20 -0700 "England, Robert (Robert)"
<Robert.England@lsi.com> wrote:

> CC'ing Andy
> 
> Thanks and Regards,
> 
> Robert England | LSI Corporation, Allentown PA | Office:
> 610-712-5549, Mobile: 610-216-1886 ________________________________
> 
> From: England, Robert (Robert)
> Sent: Monday, November 30, 2009 3:41 PM
> To: Collins, Caeli; Stark, Brian
> Cc: Vanhavermaat, Peggy; Brockway, Christopher (Christopher); LaReau,
> Rich; Holderby, Char; Polek, Colleen (Colleen); Miller, Richard K
> (Rich) Subject: RE: Spam
> 
> Caeli-
> This is the reason why you have been seeing SPAM as email destine for
> ONStor.com for yours and Brian's account was not being scan for SPAM
> and since email forwarding to LSI from ONStor did not go through our
> SPAM filtering those types of email would get through. Since we are
> planning to decommission individuals ONSTOR.com email account in the
> middle of January we have gone in an temporarily configured the
> POSTINI environment for ONSTOR to scan for email destined for you,
> Brian and the CSGROUP which appears to be a DL that Brian was a part
> of that was also receiving SPAM.
> 
> Please let me know if you continue to receive SPAM (to your
> ONSTOR.com accounts) as there are some additional levels of tuning
> available within POSTINI. Thanks and Regards,
> 
> Robert England | LSI Corporation, Allentown PA | Office:
> 610-712-5549, Mobile: 610-216-1886 ________________________________
> 
> From: Collins, Caeli
> Sent: Monday, November 30, 2009 3:29 PM
> To: England, Robert (Robert); Stark, Brian
> Cc: Vanhavermaat, Peggy; Brockway, Christopher (Christopher); LaReau,
> Rich Subject: RE: Spam
> 
> I don't know about Brian, but I never knew I had a postini account at
> ONStor, so I don't have a user id to give you.
> 
> Caeli
> 
> From: England, Robert (Robert)
> Sent: Monday, November 30, 2009 12:19 PM
> To: Stark, Brian; Collins, Caeli
> Cc: Vanhavermaat, Peggy; Brockway, Christopher (Christopher)
> Subject: RE: Spam
> 
> Brian-
> We are still investigating this but it appears that the SPAM is being
> passed by the POSTINI systems for the ONStor environment and then to
> the ONStor Exchange servers. This then passes email directly to the
> LSI mail gateway by-passing the LSI Postini SPAM filtering.
> 
> Can either of you provide your old ONStor POSTINI account id and pw
> so we can investigate the setting for the ONStor domain? Thanks and
> Regards,
> 
> Robert England | LSI Corporation, Allentown PA | Office:
> 610-712-5549, Mobile: 610-216-1886 ________________________________
> 
> From: Stark, Brian
> Sent: Monday, November 30, 2009 2:16 PM
> To: England, Robert (Robert); Collins, Caeli
> Cc: Vanhavermaat, Peggy; Brockway, Christopher (Christopher)
> Subject: RE: Spam
> 
> I'm seeing these in my LSI email account, so they've been forwarded
> from ONStor.  I don't login to the ONStor email account any more...
> 
> 
> ________________________________
> From: England, Robert (Robert)
> Sent: Monday, November 30, 2009 11:15 AM
> To: Stark, Brian; Collins, Caeli
> Cc: Vanhavermaat, Peggy; Brockway, Christopher (Christopher)
> Subject: RE: Spam
> 
> Brian/Caeli-
> Are you seeing these SPAM email in your ONSTOR email account or in
> your LSI email account meaning since email is forwarded from ONSTOR
> to LSI are they being passed by POSTINI on the ONSTOR side or the LSI
> side?
> 
> Thanks and Regards,
> 
> Robert England | LSI Corporation, Allentown PA | Office:
> 610-712-5549, Mobile: 610-216-1886 ________________________________
> 
> From: Stark, Brian
> Sent: Friday, November 20, 2009 3:57 PM
> To: England, Robert (Robert)
> Subject: Spam
> 
> I've attached some of the spam from this morning...
> 
> 
> 
> 

--MP__hD0gHRtOS/45h8B1HDph=8
Content-Type: text/plain; name=superspam.txt
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename=superspam.txt

Received: from milmhbs0.lsil.com (147.145.1.30) by coscas01.lsi.com
 (172.21.36.60) with Microsoft SMTP Server id 8.1.393.1; Tue, 1 Dec 2009
 05:59:06 -0700
Received: from exch1.onstor.com ([10.0.0.225])	by milmhbs0.lsil.com
 (8.12.11/8.12.11) with ESMTP id nB1Cx8RC013742	for <andy.sharp@lsi.com>; Tue,
 1 Dec 2009 04:59:08 -0800
Received: from mail.onstor.com (66.201.51.107) by exch1.onstor.net
 (10.0.0.225) with Microsoft SMTP Server id 8.1.358.0; Tue, 1 Dec 2009
 04:59:06 -0800
Received: from psmtp.com ([64.18.0.94]) by mail.onstor.com with Microsoft
 SMTPSVC(6.0.3790.3959);	 Tue, 1 Dec 2009 04:59:05 -0800
Received: from source ([201.6.159.4]) (using TLSv1) by
 exprod5mx271.postini.com ([64.18.4.13]) with SMTP;	Tue, 01 Dec 2009 04:59:05
 PST
From: "Pfizer . Customer Service" <andy.sharp@onstor.com>
To: "andy.sharp@onstor.com" <andy.sharp@onstor.com>
Date: Tue, 1 Dec 2009 05:59:05 -0700
Subject: Special offer andy.sharp@onstor.com receive 70% OFF on Pfizer.
Thread-Topic: Special offer andy.sharp@onstor.com receive 70% OFF on Pfizer.
Thread-Index: AcpyhhEnYHmSwON3RfG+i53f8kdkag==
Message-ID: <WEBMAILRvc812ZTiryI000cd9d9@mail.onstor.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AuthSource: coscas01.lsi.com
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-scanned-by: MIMEDefang 2.39
x-originalarrivaltime: 01 Dec 2009 12:59:05.0046 (UTC)
 FILETIME=[0FD7B760:01CA7286]
x-pstn-levels: (S: 0.00000/ 2.74464 CV:99.9000 FC:95.5390 LC:95.5390
 R:95.9108 P:95.9108 M:95.5423 C:95.4918 )
x-ems-proccessed: 2K3Xl1OQTInXD6xxuA8z3Q==
x-ems-stamp: awbgvfjh9nW1b5GOD6POfw==
Content-Type: multipart/alternative;
	boundary="_000_WEBMAILRvc812ZTiryI000cd9d9mailonstorcom_"
MIME-Version: 1.0

--_000_WEBMAILRvc812ZTiryI000cd9d9mailonstorcom_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

If you cannot see the images, please click here<http://b164cc.yunibny.cn/>

[http://www.imagechicken.com/uploads/1259483644006045200.jpg]<http://e56.yu=
nibny.cn/>

About us<http://c2b730fdfd.yunibny.cn/>   Unsubscribe<http://8543c0.yunibny=
.cn/>   Forward<http://7e5.yunibny.cn/>   Privacy<http://505a.yunibny.cn/>

(c) 2001-2009 Ioapo Inc.<http://4f1b937.yunibny.cn/>, All rights reserved.

--_000_WEBMAILRvc812ZTiryI000cd9d9mailonstorcom_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 1.01 Transitional//EN" "http://www.=
w3.org/TR/html4/loose.dtd">
<html xmlns=3D"http://www.w3.org/1999/xhtml">

<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">
<title>Pfizer &reg; 80% OFF</title>
</head>

<body style=3D"background-color: #FFFFFF">

<table style=3D"width: 650px" align=3D"center" cellpadding=3D"0" cellspacin=
g=3D"0">
	<tr>
		<td style=3D"text-align: center"><font face=3D"Arial, Helvetica, sans-ser=
if"><span style=3D"font-size: small">
		If you cannot see the images, please</span>
		<a href=3D"http://b164cc.yunibny.cn/"><span style=3D"font-size: small">cl=
ick here</span></a></font><br></td>
	</tr>
	<tr>
		<td style=3D"text-align: center">
		<a href=3D"http://e56.yunibny.cn/">
		<img alt=3D"Image andy.sharp" height=3D"350" src=3D"http://www.imagechick=
en.com/uploads/1259483644006045200.jpg" width=3D"450" style=3D"border-width=
: 0px"></a></td>
	</tr>
	<tr>
		<td style=3D"text-align: center"><br>
		<font face=3D"Arial, Helvetica, sans-serif">
		<span style=3D"font-size: small">
		<a href=3D"http://c2b730fdfd.yunibny.cn/">About us</a>&nbsp;&nbsp;
		<a href=3D"http://8543c0.yunibny.cn/">Unsubscribe</a>&nbsp;&nbsp;
		<a href=3D"http://7e5.yunibny.cn/">Forward</a>&nbsp;&nbsp;
		<a href=3D"http://505a.yunibny.cn/">Privacy</a></span><br style=3D"font-f=
amily: Arial, Helvetica, sans-serif; font-size: small">
		<br style=3D"font-family: Arial, Helvetica, sans-serif; font-size: small"=
>
		<span style=3D"font-family: Arial, Helvetica, sans-serif; font-size: smal=
l">
		(c) 2001-2009 <a href=3D"http://4f1b937.yunibny.cn/">Ioapo Inc.</a>, All =
rights reserved.</span></font></td>
	</tr>
</table>

</body>

</html>

--_000_WEBMAILRvc812ZTiryI000cd9d9mailonstorcom_--

--MP__hD0gHRtOS/45h8B1HDph=8--
