Mailing List Archive

Mailing List: techdiver

Banner Advert

Message Display

Date: Thu, 21 May 1998 12:15:42 -0400
From: Wrolf Courtney <wrolf@co*.ne*>
To: GarlooEnt <GarlooEnt@ao*.co*>
CC: kevin@nw*.co*, techdiver@aquanaut.com
Subject: Re: Originating-IP: [38.222.189.99]

--------------68114B5F64EFCC13E1196CC2
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Hank:

What the PITA approval method assures is that the apparent sending e-mail
address is
in fact the sending e-mail address.  It is pretty simple to fake your e-mail
address
in mail that you sent (just change your settings in Netscape or IExplorer), but
difficult to get someone else's incoming mail.

What "Georgina" did was sign up for a free e-mail account with HotMail, with a
name
that looks sort of like George's ("Georgina Irvine" <kategmiv@ho*.co*>).

"Georgina" then wrote a much better parody of George than mine.  For anyone who
missed
it:


     From: "Georgina Irvine" <kategmiv@ho*.co*>Subject: RE: Pre-dive
     briefing....Derrick tells students its everymanDate: Mon, 18 May 1998
     22:36:52 PDT> Your and WKPP's efforts to clean the 'techdive training'
     industry's >house is sobering to and appreciated by many on and off this
     list -- >thank you for the heads up.> John Hoffman There's enough bullshit
     going on, we don't need dick sucking. Thereal people to blame are the usual
     suspects, tell it to Mount andhis band of 80% wonder robot idiots.It's
     people like Mount who make the certification business the jokethat it is,
     and we won't have a clean slate until his geriatricass is reamed in
     court...we've all been waiting too long, and seentoo many innocent people
     die.-G

Wrolf

GarlooEnt wrote:

> kevin
> you are obvious;y someone that understands this crap- i have a question.
> how  is it possible for someone to "fake" an e-mail like this when the server
> has this pain in the ass approval method that usually take me three or more
> tries to get a message posted?????
> if it doesn't work why are we all being put through this tourture?
> hank
>
> In a message dated 98-05-19 16:07:41 EDT, you write:
>
> << Subj:         Re: Originating-IP: [38.222.189.99]
>  Date:  98-05-19 16:07:41 EDT
>  From:  kevin@nw*.co* (Kevin Connell)
>  To:    dlv@ga*.ne* (Dan Volker)
>  CC:    techdiver@aquanaut.com, abuse@ps*.ne*
>
>  It's a PSI net customer - The destination host unreachable means that it is
>  probably a dynamically assigned ip.
>
>  It looks like it came from a router in the NW (or what they call
>  nw.us.psi.net)
>
>  If people would kindly send a note with a copy of the trace and message (ip
>  adress and time should be sufficient) to abuse@ps*.ne*, that would be great.
>
>
>  Tracing route to 38.222.189.99 over a maximum of 30 hops
>
>    1   125 ms   125 ms   125 ms  sf-pm3.slip.net [207.171.192.21]
>    2   110 ms   125 ms   125 ms  sf-core-gw.slip.net [207.171.192.1]
>    3   125 ms   140 ms   125 ms  ip1.dmz107.nw.us.psi.net [204.6.107.1]
>    4  ip1.dmz107.nw.us.psi.net [204.6.107.1]  reports: Destination host
>  unreachab
>  le.
>
>  Trace complete.
>
>  At 11:24 AM 5/19/98 -0400, you wrote:
>  > The Georgina Irvine post  ( another person trying to fake George, and in
>  >this cowardly manner., to cause him trouble) came from this originating ip
>  >address:
>  >
>  >Originating-IP: [38.222.189.99]
>  >
>  >
>  >
>  >The asshole who did this needs to be tracked down, and "burned".  Any help
>  >on the tracking would be appreciated.
>  >
>  >
>  >The body of the header info was :
>  >Received: from bighorn.terra.net (root@bi*.te*.ne* [199.103.128.2]) by
>  >chickasaw.gate.net (8.8.6/8.6.12) with ESMTP id KAA65716; Tue, 19 May 1998
>  >10:16:21 -0400
>  >Received: (mail@lo*)
>  > by bighorn.terra.net (8.8.6/jr3.9) for
>  > id JAA04452; Tue, 19 May 1998 09:10:47 -0400
>  >Precedence: bulk
>  >Errors-To: owner-techdiver@aquanaut.com
>  >Received: from bighorn.terra.net (root@lo*)
>  > by bighorn.terra.net (8.8.6/jr3.9) with EXEC for techdiver
>  > id BAA26941; Tue, 19 May 1998 01:37:24 -0400
>  >Received: from hotmail.com (f80.hotmail.com [207.82.250.186])
>  > by bighorn.terra.net (8.8.6/jr3.9) with SMTP for
<techdiver@aquanaut.com>
>  > id BAA26932; Tue, 19 May 1998 01:37:24 -0400
>  >Received: (qmail 9475 invoked by uid 0); 19 May 1998 05:36:52 -0000
>  >Message-ID: <19980519053652.9474.qmail@ho*.co*>
>  >Received: from 38.222.189.99 by www.hotmail.com with HTTP;
>  > Mon, 18 May 1998 22:36:52 PDT
>  >X-Originating-IP: [38.222.189.99]
>  >From: "Georgina Irvine" <kategmiv@ho*.co*>
>  >To: techdiver@aquanaut.com
>  >Subject: RE: Pre-dive briefing....Derrick tells students its everyman
>  >    for
>  >Content-Type: text/plain
>  >Date: Mon, 18 May 1998 22:36:52 PDT
>  >X-UIDL: b5fd157a5cbc1158584891d2b3753ccf
>  >
>  >--
>  >Send mail for the `techdiver' mailing list to `techdiver@aquanaut.com'.
>  >Send subscribe/unsubscribe requests to `techdiver-request@aquanaut.com'.
>  >
>  >
>
>  --
>  Send mail for the `techdiver' mailing list to `techdiver@aquanaut.com'.
>  Send subscribe/unsubscribe requests to `techdiver-request@aquanaut.com'.
>
>
>  ----------------------- Headers --------------------------------
>  Return-Path: <owner-techdiver@aquanaut.com>
>  Received: from  relay29.mx.aol.com (relay29.mail.aol.com [172.31.109.29]) by
> air12.mx.aol.com (v43.15) with SMTP; Tue, 19 May 1998 16:07:40 -0400
>  Received: from bighorn.terra.net (bighorn.terra.net [199.103.128.2])
>           by relay29.mx.aol.com (8.8.5/8.8.5/AOL-4.0.0)
>           with ESMTP id QAA14575;
>           Tue, 19 May 1998 16:07:25 -0400 (EDT)
>  Received: (mail@lo*)
>         by bighorn.terra.net (8.8.6/jr3.9) for
>         id PAA31030; Tue, 19 May 1998 15:39:28 -0400
>  Precedence: bulk
>  Errors-To: owner-techdiver@aquanaut.com
>  Received: from bighorn.terra.net (root@lo*)
>         by bighorn.terra.net (8.8.6/jr3.9) with EXEC for techdiver
>         id PAA30445; Tue, 19 May 1998 15:30:47 -0400
>  Received: from mole.slip.net (mole.slip.net [207.171.193.16])
>         by bighorn.terra.net (8.8.6/jr3.9) with ESMTP for
<techdiver@aquanaut.com>
>         id PAA30435; Tue, 19 May 1998 15:30:45 -0400
>  Received: from sf-pm3-4-36.dialup.slip.net ([207.171.196.36] helo=chaucer)
>         by mole.slip.net with smtp (Exim 1.90 #1)
>         id 0ybs5n-0001fU-00; Tue, 19 May 1998 12:30:32 -0700
>  Message-Id: <3.0.3.32.19980519123109.008fd190@pr*.ne*>
>  X-Sender: kevin@pr*.ne*
>  X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.3 (32)
>  Date: Tue, 19 May 1998 12:31:09 -0700
>  To: "Dan Volker" <dlv@ga*.ne*>
>  From: Kevin Connell <kevin@nw*.co*>
>  Subject: Re: Originating-IP: [38.222.189.99]
>  Cc: techdiver@aquanaut.com, abuse@ps*.ne*
>  In-Reply-To: <199805191512.LAA74210@on*.ga*.ne*>
>  Mime-Version: 1.0
>  Content-Type: text/plain; charset="us-ascii"
>

--
Wrolf

Wrolf's Wreck:     http://www.concentric.net/~Wrolf
Wrolf's Net.Wreck: http://www.concentric.net/~Wrolf/netmgmt.shtml


--------------68114B5F64EFCC13E1196CC2
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<HTML>
Hank:

<P>What the PITA approval method assures is that the apparent sending e-mail
address is in fact the sending e-mail address.  It is pretty simple
to fake your e-mail address in mail that you sent (just change your settings
in Netscape or IExplorer), but difficult to get someone else's incoming
mail.

<P>What "Georgina" did was sign up for a free e-mail account with HotMail,
with a name that looks sort of like George's ("Georgina Irvine"
<kategmiv@ho*.co*>).

<P>"Georgina" then wrote a much better parody of George than mine. 
For anyone who missed it:
<BR> 
<BLOCKQUOTE>From: "Georgina Irvine" <kategmiv@ho*.co*>Subject: RE:
Pre-dive briefing....Derrick tells students its everymanDate: Mon, 18 May
1998 22:36:52 PDT> Your and WKPP's efforts to clean the 'techdive training'
industry's >house is sobering to and appreciated by many on and off this
list -- >thank you for the heads up.> John Hoffman There's enough
bullshit going on, we don't need dick sucking. Thereal people to blame
are the usual suspects, tell it to Mount andhis band of 80% wonder robot
idiots.It's people like Mount who make the certification business the jokethat
it is, and we won't have a clean slate until his geriatricass is reamed
in court...we've all been waiting too long, and seentoo many innocent people
die.-G</BLOCKQUOTE>


<P><B>Wrolf</B>

<P>GarlooEnt wrote:
<BLOCKQUOTE TYPE=CITE>kevin
<BR>you are obvious;y someone that understands this crap- i have a question.
<BR>how  is it possible for someone to "fake" an e-mail like this
when the server
<BR>has this pain in the ass approval method that usually take me three
or more
<BR>tries to get a message posted?????
<BR>if it doesn't work why are we all being put through this tourture?
<BR>hank

<P>In a message dated 98-05-19 16:07:41 EDT, you write:

<P><< Subj:         Re:
Originating-IP:
[38.222.189.99]
<BR> Date:  98-05-19 16:07:41 EDT
<BR> From:  kevin@nw*.co* (Kevin Connell)
<BR> To:    dlv@ga*.ne* (Dan Volker)
<BR> CC:    techdiver@aquanaut.com, abuse@ps*.ne*

<P> It's a PSI net customer - The destination host unreachable means
that it is
<BR> probably a dynamically assigned ip.

<P> It looks like it came from a router in the NW (or what they call
<BR> nw.us.psi.net)

<P> If people would kindly send a note with a copy of the trace and
message (ip
<BR> adress and time should be sufficient) to abuse@ps*.ne*, that
would be great.
<BR> 

<P> Tracing route to 38.222.189.99 over a maximum of 30 hops

<P>   1   125 ms   125 ms   125
ms  sf-pm3.slip.net [207.171.192.21]
<BR>   2   110 ms   125 ms   125
ms  sf-core-gw.slip.net [207.171.192.1]
<BR>   3   125 ms   140 ms   125
ms  ip1.dmz107.nw.us.psi.net [204.6.107.1]
<BR>   4  ip1.dmz107.nw.us.psi.net [204.6.107.1] 
reports:
Destination host
<BR> unreachab
<BR> le.

<P> Trace complete.

<P> At 11:24 AM 5/19/98 -0400, you wrote:
<BR> > The Georgina Irvine post  ( another person trying to fake
George, and in
<BR> >this cowardly manner., to cause him trouble) came from this
originating ip
<BR> >address:
<BR> >
<BR> >Originating-IP: [38.222.189.99]
<BR> >
<BR> >
<BR> >
<BR> >The asshole who did this needs to be tracked down, and
"burned". 
Any help
<BR> >on the tracking would be appreciated.
<BR> >
<BR> >
<BR> >The body of the header info was :
<BR> >Received: from bighorn.terra.net (root@bi*.te*.ne*
[199.103.128.2])
by
<BR> >chickasaw.gate.net (8.8.6/8.6.12) with ESMTP id KAA65716; Tue,
19 May 1998
<BR> >10:16:21 -0400
<BR> >Received: (mail@lo*)
<BR> > by bighorn.terra.net (8.8.6/jr3.9) for
<BR> > id JAA04452; Tue, 19 May 1998 09:10:47 -0400
<BR> >Precedence: bulk
<BR> >Errors-To: owner-techdiver@aquanaut.com
<BR> >Received: from bighorn.terra.net (root@lo*)
<BR> > by bighorn.terra.net (8.8.6/jr3.9) with EXEC for techdiver
<BR> > id BAA26941; Tue, 19 May 1998 01:37:24 -0400
<BR> >Received: from hotmail.com (f80.hotmail.com [207.82.250.186])
<BR> > by bighorn.terra.net (8.8.6/jr3.9) with SMTP for
<techdiver@aquanaut.com>
<BR> > id BAA26932; Tue, 19 May 1998 01:37:24 -0400
<BR> >Received: (qmail 9475 invoked by uid 0); 19 May 1998 05:36:52
-0000
<BR> >Message-ID: <19980519053652.9474.qmail@ho*.co*>
<BR> >Received: from 38.222.189.99 by www.hotmail.com with HTTP;
<BR> > Mon, 18 May 1998 22:36:52 PDT
<BR> >X-Originating-IP: [38.222.189.99]
<BR> >From: "Georgina Irvine" <kategmiv@ho*.co*>
<BR> >To: techdiver@aquanaut.com
<BR> >Subject: RE: Pre-dive briefing....Derrick tells students its
everyman
<BR> >    for
<BR> >Content-Type: text/plain
<BR> >Date: Mon, 18 May 1998 22:36:52 PDT
<BR> >X-UIDL: b5fd157a5cbc1158584891d2b3753ccf
<BR> >
<BR> >--
<BR> >Send mail for the `techdiver' mailing list to
`techdiver@aquanaut.com'.
<BR> >Send subscribe/unsubscribe requests to
`techdiver-request@aquanaut.com'.
<BR> >
<BR> >

<P> --
<BR> Send mail for the `techdiver' mailing list to
`techdiver@aquanaut.com'.
<BR> Send subscribe/unsubscribe requests to
`techdiver-request@aquanaut.com'.
<BR> 

<P> ----------------------- Headers --------------------------------
<BR> Return-Path: <owner-techdiver@aquanaut.com>
<BR> Received: from  relay29.mx.aol.com (relay29.mail.aol.com
[172.31.109.29]) by
<BR>air12.mx.aol.com (v43.15) with SMTP; Tue, 19 May 1998 16:07:40 -0400
<BR> Received: from bighorn.terra.net (bighorn.terra.net
[199.103.128.2])
<BR>          by
relay29.mx.aol.com
(8.8.5/8.8.5/AOL-4.0.0)
<BR>          with ESMTP id
QAA14575;
<BR>          Tue, 19 May
1998 16:07:25 -0400 (EDT)
<BR> Received: (mail@lo*)
<BR>        by bighorn.terra.net
(8.8.6/jr3.9)
for
<BR>        id PAA31030; Tue, 19 May
1998 15:39:28 -0400
<BR> Precedence: bulk
<BR> Errors-To: owner-techdiver@aquanaut.com
<BR> Received: from bighorn.terra.net (root@lo*)
<BR>        by bighorn.terra.net
(8.8.6/jr3.9)
with EXEC for techdiver
<BR>        id PAA30445; Tue, 19 May
1998 15:30:47 -0400
<BR> Received: from mole.slip.net (mole.slip.net [207.171.193.16])
<BR>        by bighorn.terra.net
(8.8.6/jr3.9)
with ESMTP for <techdiver@aquanaut.com>
<BR>        id PAA30435; Tue, 19 May
1998 15:30:45 -0400
<BR> Received: from sf-pm3-4-36.dialup.slip.net ([207.171.196.36]
helo=chaucer)
<BR>        by mole.slip.net with smtp
(Exim 1.90 #1)
<BR>        id 0ybs5n-0001fU-00; Tue,
19 May 1998 12:30:32 -0700
<BR> Message-Id: <3.0.3.32.19980519123109.008fd190@pr*.ne*>
<BR> X-Sender: kevin@pr*.ne*
<BR> X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.3 (32)
<BR> Date: Tue, 19 May 1998 12:31:09 -0700
<BR> To: "Dan Volker" <dlv@ga*.ne*>
<BR> From: Kevin Connell <kevin@nw*.co*>
<BR> Subject: Re: Originating-IP: [38.222.189.99]
<BR> Cc: techdiver@aquanaut.com, abuse@ps*.ne*
<BR> In-Reply-To: <199805191512.LAA74210@on*.ga*.ne*>
<BR> Mime-Version: 1.0
<BR> Content-Type: text/plain; charset="us-ascii"
<BR> </BLOCKQUOTE>


<P>--
<BR>Wrolf

<P>Wrolf's Wreck:     <A
HREF="http://www.concentric.net/~Wrolf">http://www.concentric.net/~Wrolf</A>
<BR>Wrolf's Net.Wreck: <A
HREF="http://www.concentric.net/~Wrolf/netmgmt.shtml">http://www.concentric.net/
~Wrolf/netmgmt.shtml</A>
<BR> </HTML>

--------------68114B5F64EFCC13E1196CC2--

--
Send mail for the `techdiver' mailing list to `techdiver@aquanaut.com'.
Send subscribe/unsubscribe requests to `techdiver-request@aquanaut.com'.

Navigate by Author: [Previous] [Next] [Author Search Index]
Navigate by Subject: [Previous] [Next] [Subject Search Index]

[Send Reply] [Send Message with New Topic]

[Search Selection] [Mailing List Home] [Home]