Voytek Eymont wrote:
>
> On Thu, October 5, 2006 2:44 pm, Erik de Castro Lopo wrote:
> > Voytek Eymont wrote:
>
>
> >> Received: from [87.68.49.228] (helo=87.68.49.228.cable.012.net.il)
> >> by postoffice01.mail-hub.dodo.com.au with smtp (Exim 4.54) id
> >> 1GUfTP-0004Ga-70; Tue, 03 Oct 2006 18:18:07 +1000
> >>
> >
> > That one is a bit suspicious and all the ones below that one
> > were faked.
>
> Erik,
>
> what is the giveaway sign ? the change in target address ?
The fact the Receibed line after the one above said "by
symantecliveupdate.com" is not he same as 87.68.49.228.cable.012.net.il.
In fact, symantecliveupdate.com does net even have a DNS A record.
For a better explaination of email headers and how to read
them, have a look at this:
http://www.stopspam.org/email/headers.html
Erik
--
+-----------------------------------------------------------+
Erik de Castro Lopo
+-----------------------------------------------------------+
"Nearly a third of British Muslims, 32 per cent, are far more censorious,
believing that "Western society is decadent and immoral and that Muslims
should seek to bring it to an end"."
-- http://www.telegraph.co.uk/news/main.jhtml?xml=/news/2005/07/23/npoll23.xml
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
