On Thursday 04 September 2003 08:55 am, stefmit wrote:
> > Following the headers further down the chain, if they are to be believed
> > would seem to indicate the origination was a pacbell DSL modem
> > (67.122.222.126) which does belong to Pacbell so is probably accurate.
> > If anyone on the list is using a pacbell DSL modem and has Windows
> > machines attached, you may want to check your machine for infection.
> >
> > I, however, did not receive this original message, so I suspect that it
> > was either not sent to the list or my virus scanning stuff is working
> > well enough that it was trashed before it got to my inbox.
>
> Where did you get the 67.x.y.z. address from?
>
> To me the originator looks like being from adelphia.net:
>
> Received: from KRIS (ca-dibar-cuda1-c1d-204.anhmca.adelphia.net
> [24.48.211.204]) by smtp.mandrax.org (Postfix) with ESMTP id C8D4556A1D for
> <[EMAIL PROTECTED]>; Thu, 04 Sep 2003 03:53:10 +0200
> host 80.67.180.169 (getting name) no name
> 24.48.211.204 is not an MX for ca-dibar-cuda1-c1d-204.anhmca.adelphia.net
> host ca-dibar-cuda1-c1d-204.anhmca.adelphia.net (checking ip) =
> 24.48.211.204
As I stated, I did not receive the original. The 67. address was in the
original headers posted by Anne who was asking for some assistance in
figuring out if the message was actually forwarded through the Mandrake
mailing list.
The complete chain of headers that she posted is here:
Return-Path: <[EMAIL PROTECTED]>
Received: from smtp.mandrake.org (212.43.244.24) by
mk-cpfrontend.uk.tiscali.com (6.7.018)
id 3F547F72003A439B for [EMAIL PROTECTED]; Thu, 4 Sep
2003 09:10:51 +0100
Received: from smtp.mandrax.org (smtp.mandrax.org [80.67.180.169])
by smtp.mandrake.org (Postfix) with ESMTP
id 940C94A916C; Thu, 4 Sep 2003 10:17:58 +0200 (CEST)
Received: by smtp.mandrax.org (Postfix, from userid 500)
id 78D7956A07; Thu, 4 Sep 2003 04:25:21 +0200 (CEST)
Delivered-To: [EMAIL PROTECTED]
Received: from TOSHIBA-LT (adsl-67-122-222-126.dsl.snfc21.pacbell.net
[67.122.222.126]) by smtp.mandrax.org (Postfix) with ESMTP id
A01C456A09
for <[EMAIL PROTECTED]>; Thu, 4 Sep 2003 04:23:47 +0200
(CEST)
Note the last header on the chain, the one that was sending to
smtp.mandrax.org.
--
Bryan Phinney
Software Test Engineer
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
