Return to BSD News archive
Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!nntp.coast.net!nntp.primenet.com!news.mathworks.com!howland.erols.net!EU.net!main.Germany.EU.net!Germany.EU.net!Dortmund.Germany.EU.net!interface-business.de!usenet From: j@ida.interface-business.de (J Wunsch) Newsgroups: comp.unix.bsd,comp.unix.bsd.misc Subject: Re: Email Snatching Date: 2 Oct 1996 12:09:32 GMT Organization: interface business GmbH, Dresden Lines: 21 Message-ID: <52tm1s$9uf@innocence.interface-business.de> References: <3240168F.234F@rpi.edu> Reply-To: joerg_wunsch@interface-business.de (Joerg Wunsch) NNTP-Posting-Host: ida.interface-business.de X-Newsreader: knews 0.9.6 X-Phone: +49-351-31809-14 X-Fax: +49-351-3361187 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E Xref: euryale.cc.adfa.oz.au comp.unix.bsd:16833 comp.unix.bsd.misc:1378 Scott DeWitt <dewits4@rpi.edu> wrote: > I recently received a prank message via email and was wondering if > there is any way to trace it to the user on the remotes system. I > traced it back this far: The Received: headers. By RFC1123, they should carry the claimed sending machine (from the HELO statement), as well as the numeric and reverse-looked up IP address and domain name of the machine delivering the mail. > A particular machine at a college Complain at their postmaster. It's their responsibility to keep trace of the machine's use for a reasonable amount of time, and to prevent misuse. -- J"org Wunsch Unix support engineer joerg_wunsch@interface-business.de http://www.interface-business.de/~j