On Thu, 04 Jan 1996 22:11:35 -0500 Andy Schmidt said:
>Ken Sallot wrote:
>> > Message-Id: <199601040301.WAA10078@du*.co*.co*>
>> > From: Joel Markwell {ATL} <73700.2054@co*.co*>
>> And look at the "received from" line again. Look, it's comming from
>> compuserve as well!
>> I really do not think we have a problem with someone faking a post
>> here. All of the fake posts have been easily traceable to a domain by
>> the headers.
>
>Ken, it is a known "feature" of the internet SMTP (Simple Mail Transfer
>Protocol) that most mail servers will accept outgoing mail from ANY mail
>client.
** Duuhhhhh ** :-)
>This message that I'm typing RIGHT NOW is being written while I am dialed into
>my regular Internet provider
Which would be:
Received: from 73467.2574.compuserve.com (slip-ppp5.ramsey.nis.net
^^^^^^^^^^^^^^
[198.69.26.84]) by arl-mail-svc-1.compuserve.com (8.6.10/8.6.9) with SMTP id
WAA22318.; Thu, 4 Jan 1996 22:11:57 -0500
Or in other words:
National Internet Source (NIS2-DOM)
12 Maple Street
Ramsey, NJ 07446
Domain Name: NIS.NET
In George's words, this is a "stroke forgery".
Stay tuned for my upcoming video "Doing it Right" which illustrates the
proper tools, methods, and software rigging necessary for extreme e-mail
diving, Hogarthian style :-)
Jeff Kell <jeff@ut*.ut*.ed*>
Navigate by Author:
[Previous]
[Next]
[Author Search Index]
Navigate by Subject:
[Previous]
[Next]
[Subject Search Index]
[Send Reply] [Send Message with New Topic]
[Search Selection] [Mailing List Home] [Home]