Somebody has been sending for several weeks commercial spam with spoofed From: field in the header containing various fictitious addresses from the mkolar.org domain. I have learned about it only because some of these spoofed e-mails are being returned to mkolar.org because they are undeliverable.

NONE OF THESE ORIGINATED FROM THIS SITE!

If you ever got such an e-mail, you can verify this fact by reading carefully its full header. Here you can find out more: Reading Email Headers.

Here is a recent example of an e-mail pretending to originate from this site: 

Return-Path: <oevb@mkolar.org>
Received: from dsl85-106-59190.ttnet.net.tr (dsl85-106-59190.ttnet.net.tr [85.106.231.54] (may be forged))
	by penrose.cs.tin.it (8.13.3/8.13.3) with SMTP id k4J9RE04007913
	for <del_piero@juventus.it>; Fri, 19 May 2006 11:27:15 +0200 (CEST)
	(envelope-from oevb@mkolar.org)
Received: from [85.106.226.151] (helo=si.bvzxya)
	by dsl85-106-59190.ttnet.net.tr with smtp (Exim 4.43)
	id 1Fh1Je-0005ld-GY; Fri, 19 May 2006 12:30:38 +0300
Message-ID: <001901c67b26$68706dbe$97e26a55@si.bvzxya>
From: "Bridget Mcginnis" <oevb@mkolar.org>
To: <del_piero@juventus.it>
Subject: onus max
Date: Fri, 19 May 2006 12:18:02 +0300
MIME-Version: 1.0
Content-Type: multipart/related;
	type="multipart/alternative";
	boundary="----=_NextPart_000_0015_01C67B3F.8DBDA566"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106

This is a multi-part message in MIME format.

------=_NextPart_000_0015_01C67B3F.8DBDA566
Content-Type: multipart/alternative;
	boundary="----=_NextPart_001_0016_01C67B3F.8DBDA57C"
.......

There is no e-mail account oevb@mkolar.org.
The true origin of each e-mail gives the first in time (positioned last in the header) Received field of the header (I marked it in red above). It says that this e-mail was sent from IP address 85.106.226.151 which actually belongs to the ttnet.net.tr domain in Turkey!!!
You can see that in this case a relay site in Italy (second line of the header) correctly guessed that the header is forged (may be forged).

I found about this particular e-mail only because it's intended recipient also doesn't exist, and so the e-mail was returned to the forged Return Path in the first line of the header, accompanied with this note: 

   ----- The following addresses had permanent fatal errors -----
<del_piero@juventus.it>
    (reason: 550 5.0.0 <del_piero@juventus.it>... No such user here)

May 19, 2006, mk