Re: Reading Email Headers!!

From: Nick Edens (nedens@checkerdist.com)
Date: 08/19/02


From: Nick Edens <nedens@checkerdist.com>
To: Krishna_shekhar@softhome.net
Date: Mon Aug 19 08:46:49 2002

It does not appear that someone is sending you anonymous email.
However it is very much childs play to forge the data in the email header. So I would not completely rely on it if you the message could be forged.

The header does tell us that the return path of the message (this is used if you reply to the message) is the following.

Return-Path: xiaojing.com@eyou.com

That shows me that the message is not being sent anonymously, but that info could be forged.
What makes you suspect the message is being sent anonymously?

- Nick Edens

------------ Original Message ------------
From: Krishna_shekhar@softhome.net
To: security-basics@securityfocus.com
Sent: 08/17/02 17:44:58
Subject: Re: Reading Email Headers!!

> Hi,
> I wanted to know whether someone is anonymously sending me mails or
> not.
> This is the email header which I received.
>
>
> Received: from cpimssmtpa02.msn.com ([207.46.181.107]) by
> mc2-f39.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.4905); Fri, 16
> Aug 2002 10:42:55 -0700
> Received: from eyou.com ([61.136.62.76]) by cpimssmtpa02.msn.com with
> Microsoft SMTPSVC(5.0.2195.4905); Fri, 16 Aug 2002 10:41:53 -0700
> Received: (qmail 77088 invoked by alias); 17 Aug 2002 01:45:41 +0800
> Received: from unknown (HELO eyou.com) (172.16.2.1) by 172.16.1.3 with
> SMTP; 17 Aug 2002 01:45:41 +0800
> Received: (qmail 52798 invoked by uid 65534); 17 Aug 2002 01:42:48 +0800
> Message-ID: <20020817014248.52797.qmail@eyou.com>
> Return-Path: xiaojing.com@eyou.com
> X-OriginalArrivalTime: 16 Aug 2002 17:41:53.0540 (UTC)
> FILETIME=[35646C40:01C2454C]
>
> Please Help!
>
> regards
> Krishna
>
>
>