On Tuesday, July 23, 2002, at 10:24 PM, Philip Ershler wrote:
> I assume this email has been spoofed so it looks like it comes from > fink? > > From: [EMAIL PROTECTED] > Subject: [Fink-users] Harvest lots of E-Mail addresses quickly > > I can't even send the full headers because they seem to be made up of > tiff images. <headers> Received: from smtpin12.mac.com ([10.13.10.157]) by ms02.mac.com (Netscape Messaging Server 4.15 ms02 Mar 5 2002 15:11:07) with ESMTP id GZQDKI00.98L; Tue, 23 Jul 2002 19:00:18 -0700 Received: from usw-sf-list2.sourceforge.net (usw-sf-fw2.sourceforge.net [216.136.171.252]) by smtpin12.mac.com (8.12.3/8.12.1/1.0) with ESMTP id g6O2079c020834; Tue, 23 Jul 2002 19:00:08 -0700 (PDT) Received: from usw-sf-list1-b.sourceforge.net ([10.3.1.13] helo=usw-sf- list1.sourceforge.net) by usw-sf-list2.sourceforge.net with esmtp (Exim 3.31-VA-mm2 #1 (Debian)) id 17XBRc-0008UW-00; Tue, 23 Jul 2002 19:00:04 -0700 Received: from [218.0.77.169] (helo=localhost.com) by usw-sf-list1.sourceforge.net with smtp (Exim 3.31-VA-mm2 #1 (Debian)) id 17XBQu-00032z-00 for <[EMAIL PROTECTED]>; Tue, 23 Jul 2002 18:59:20 -0700 </headers> My damn nslookup doesn't work when I'm at home... one thing I really liked about work. Anyway, if you trace the timestamps, it would appear that this message did in fact originate at 218.0.77.169 . And if you check that IP with your trusty browser, you'll find some further evidence.... If someone has a working nslookup and can determine the domain name of that IP address, do a "whois" to get the contact information for the owner of the domain name. Usually this information is spoofed or fake too, but if the spammer was stupid enough to put their own phone number or a real email address there, this could be useful for retaliation. Of course, I'm not condoning anything whatsoever.... anyway, like I said, my nslookup isn't working. Erik ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Fink-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/fink-users
