Re: Spoofed e-mailings.

From: N. Miller (duh_at_blackhole.aosake.net)
Date: 06/15/04 

Date: Mon, 14 Jun 2004 22:25:37 -0700

In article <pan.2004.06.15.02.48.50.181684.2986@earthlink.net>, Jason Wade
says...

> One of your friends is infected with one of the many worms
> that do this kind of spoofing. Look at the headers, find out
> the sending ip address and report the worm to the isp
> that sent it to you.

Not necessarily true. It could be somebody unknown to the O.P., but who has
a friend in common with the O.P. The headers will only identify the IP
address of the infected computer at the time the infected message was sent.
The ISP of the infected source would have to check their connection logs to
identify the sender. 

-- 
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

Relevant Pages

  • Re: attachment and e-mail where to report these security issues?
    ... THAT is why the ENTIRE headers should be ... sent to the originating ISP, so the ISP can look up the correct originating ... report that DOES include the headers. ... >> has an infected system, don't you think they would like to know about it ...
    (microsoft.public.security.virus)
  • Re: attachment and e-mail where to report these security issues?
    ... As far as the "looking up" I was referring to looking into the headers. ... headers, how to figure out the originating ISP to send the information to, ... the address listed as the sender is not likely to be the actual sender. ... > report that DOES include the headers. ...
    (microsoft.public.security.virus)
  • Re: attachment and e-mail where to report these security issues?
    ... Perhaps you could give us a button, "Forward to sender's ISP provider"? ... THAT is why the ENTIRE headers should be ... > sent to the originating ISP, so the ISP can look up the correct originating ... > report that DOES include the headers. ...
    (microsoft.public.security.virus)
  • Re: New pond
    ... This NG is more or less for those who have decorative liner ponds in their yards for fish and pond plants. ... Her account is dpc6682112001.direcpc.com and you may report her by calling 1-800-DirecPC, ... Her use of remailers can still be traced to her account.No American ISP like to be ... associated with Hate Speech no matter if Hate speech is protected ...
    (rec.ponds)
  • Re: Virus Sent in Email intentionally
    ... Mark Dormer wrote: ... Find the posters ISP, visit that ISP's website to see their policy ... Should or could I send this to someone to report ... I suspect I am getting this from a poster to a political group(Hate ...
    (microsoft.public.security.virus)