>One of our pupils impersonated our administrator account.
It is amazing how many people think this is a difficult task, that requires any work. All that it requires is telling your mail client that you have switched addresses, exactly the same as you would do if you switched ISPs. There is no magic to it, and calling it "impersonating" really isn't correct. They are just using a return address they do not have permission to use. It's almost the same as writing someone else's return address on a standard letter. >I got the ip addresses of the mail server that they used from the headers >of the message, used www.geektools.com to track down who owns the ip >address range, and then conacted their isp. If someone does this intentionally for some reason (as in your case), and it is not spam, you can do just that (or use our http://www.DNSstuff.com ) to find the source, which will often be correct. Note that in the case of spam, it will just lead you to the administrator of an open relay -- if you are lucky, you will find an ISP that you can take to court (assuming they are in the same country as you) to find out the bogus contact information the spammer used when they signed up for the account. >Whilst the isp would not release any contact details of the user, their >parents contacted the school asking what it was all about, thus we were >able to punish pupil at school as well. <G> -Scott --- Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail. http://www.declude.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
