IPP> U can identify the person who tries to spam

IPP> U can identify the person who tries to spam

henrik.holst at i-data.com henrik.holst at i-data.com
Thu May 4 07:27:37 EDT 2000



I agree you could track me in the DonaldDuck mail I just send. But if I called
my Internet provider from
home, and found a SMTP server supporting relaying, I could send you a mail where
the field

Received: from MOBILHH ([172.20.128.2]) by idaHUB2000.i-data.com (Lotus

would contain a 'random' IP and not "172.20.128.2" and the name
"MOBILHH" could be anything, because some SMTP server uses the value of
the HELO command. Of course you will be able to see the name of the SMTP
server who submit the mail, but not the user, unless the Internet provider
logs my call.

So if you really want to send a 'false' mail, I think you could do it.


Henrik





Sandeep Kamath <sandeep at teil.soft.net> on 04-05-2000 11:02:48

To:   Henrik Holst/INT at i-data
cc:   ipp at pwg.org, Carl-Uno Manros <carl at manros.com>

Subject:  IPP> U can identify the person who tries to spam




Hi,

 henrik UR e-mail can be tracked with a little effort. there is an option
that allows us view the entire mail header . so if U send an e-mail I can
trace from where and when it was sent. here is the header of the donald
duck mail.U
can change the senders name in pop3 or by telneting to port 25 , but I can
catch U by looking at the mail header. Mail header follows below


Received: from pwg.org ([192.146.101.49]) by teil.soft.net
    (980427.SGI.8.8.8/970903.SGI.AUTOCF) via ESMTP id NAA74775; Thu,
     4 May 2000 13:28:45 +0530 (IST)
Received: from localhost by pwg.org (8.9.2/8.9.2) with SMTP id EAA27091;
        Thu, 4 May 2000 04:04:40 -0400 (EDT)
Received: by pwg.org (bulk_mailer v1.5); Thu, 4 May 2000 04:00:04 -0400
Received: by pwg.org (8.9.2/8.9.2) id DAA25838
        for ipp-outgoing; Thu, 4 May 2000 03:58:47 -0400 (EDT)
Received: from firewall.i-data.com (firewall.i-data.com [195.24.22.194])
        by pwg.org (8.9.2/8.9.2) with SMTP id DAA25834
        for <ipp at pwg.org>; Thu, 4 May 2000 03:58:43 -0400 (EDT)
Received: (qmail 24800 invoked from network); 4 May 2000 06:53:08 -0000
Received: from unknown (HELO idaHUB2000.i-data.com) (172.16.1.8)
  by firewall.i-data.com with SMTP; 4 May 2000 06:53:08 -0000
Received: from MOBILHH ([172.20.128.2]) by idaHUB2000.i-data.com (Lotus
SMTP
    MTA v4.6.3  (733.2 10-16-1998)) with SMTP id 412568D5.0030CD41; Thu,
     4 May 2000 09:53:02 +0100
Message-ID: <002301bfb59d$b40e6b40$028014ac at IDANTDOM>
Reply-To: "Donald Duck" <DonaldDuck at Disneyland.com>
From: "Donald Duck" <DonaldDuck at Disneyland.com>
To: <ipp at pwg.org>
Subject: IPP> Email spamming
Date: Thu, 4 May 2000 09:52:32 +0200
Organization: Disneyland
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0020_01BFB5AE.774AF000"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2615.200
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
Sender: owner-ipp at pwg.org
Parts/Attachments:
   1   OK     ~4 lines  Text (charset: ISO-8859-1)
   2 Shown   ~14 lines  Text (charset: ISO-8859-1)
----------------------------------------






regards,
Sandeep Kamath
Software Engineer - Design & Development
Networking & Communication
TATA ELXSI LTD.
Bangalore,
India.

Ph:  8410222
     8410221
ext: 427.

--------------------------












More information about the Ipp mailing list