Mailing List Archive

Mailing List: techdiver

Banner Advert

Message Display

Date: Fri, 05 Jan 96 00:18:01 EST
From: Jeff Kell <JEFF@UT*.UT*.ED*>
Organization: University of Tennessee at Chattanooga
Subject: Re: Bogus post my ass.. (Was Re: Bogus "join..forum" Mes.)
To: Andy Schmidt <73467.2574@co*.co*>, techdiver@terra.net
On Thu, 04 Jan 1996 22:11:35 -0500 Andy Schmidt said:
>Ken Sallot wrote:
>> > Message-Id: <199601040301.WAA10078@du*.co*.co*>
>> > From: Joel Markwell {ATL} <73700.2054@co*.co*>
>> And look at the "received from" line again. Look, it's comming from
>> compuserve as well!
>> I really do not think we have a problem with someone faking a post
>> here. All of the fake posts have been easily traceable to a domain by
>> the headers.
>
>Ken, it is a known "feature" of the internet SMTP (Simple Mail Transfer
>Protocol) that most mail servers will accept outgoing mail from ANY mail
>client.

** Duuhhhhh ** :-)

>This message that I'm typing RIGHT NOW is being written while I am dialed into
>my regular Internet provider

Which would be:

Received: from 73467.2574.compuserve.com (slip-ppp5.ramsey.nis.net
                                                    ^^^^^^^^^^^^^^
 [198.69.26.84]) by arl-mail-svc-1.compuserve.com (8.6.10/8.6.9) with SMTP id
 WAA22318.; Thu, 4 Jan 1996 22:11:57 -0500

Or in other words:

National Internet Source (NIS2-DOM)
   12 Maple Street
   Ramsey, NJ 07446
   Domain Name: NIS.NET

In George's words, this is a "stroke forgery".

Stay tuned for my upcoming video "Doing it Right" which illustrates the
proper tools, methods, and software rigging necessary for extreme e-mail
diving, Hogarthian style :-)

Jeff Kell <jeff@ut*.ut*.ed*>

Navigate by Author: [Previous] [Next] [Author Search Index]
Navigate by Subject: [Previous] [Next] [Subject Search Index]

[Send Reply] [Send Message with New Topic]

[Search Selection] [Mailing List Home] [Home]