procmail
[Top] [All Lists]

Re: Where in blazes did this come from?

1997-06-02 11:35:00
On Mon, 2 Jun 1997, Matthew G. Saroff wrote:

---------- Forwarded message ---------- Return-Path: 
email_5(_at_)pacbell(_dot_)net
Received: from mail-gw3.pacbell.net (mail-gw3.pacbell.net [206.13.28.55]) by 
pcans1.pca.net (8.6.12/8.6.9) with ESMTP id NAA19384 for 
<msaroff(_at_)pcans1(_dot_)pca(_dot_)net>; Mon, 2 Jun 1997 13:59:36 GMT
From: email_5(_at_)pacbell(_dot_)net
Received: from reduce-taxes (ppp-206-170-26-163.sntc01.pacbell.net 
[206.170.26.163]) by mail-gw3.pacbell.net (8.8.5/8.7.1) with SMTP id 
GAA04021; Mon, 2 Jun 1997 06:53:41 -0700 (PDT)

looks like realistic headers.

I would assume the rest here are faked (location in header,
discontinuity in path, etc.)

Received: (from capt_domo(_at_)lclhost!) by pc.spark_er.net (8.7.3/6.7.3) id 
CFF34285 for planet_oreo_horizon; Sat, 17 May 2001 20:12:58 -0500 (CDT)
Message-Id: <199706020653(_dot_)e-mail(_at_)E_C_D(_dot_)com>
Received: from in2.i_b_m.net (in2.i_b_m.net [165.87.194.259]) by 
pc.spark_er.net (8.7.3/6.7.3) with SMTP id CFF89281 for 
<rodney(_at_)LAPD!(_dot_)com>; Sat, 17 May 2001 20:12:55 -0500 (CDT)
Received: (from uudp(_at_)lcllhost!) by in2.i_b_m.net (8.6.9/8.6.9) id 
CFF569794 for <rodney(_at_)LAPD!(_dot_)com>; Sun, 18 May 1997 01:12:39 GMT
Received: from tomsnet!.com (mh.tomsnet!.com [100.301.57.69]) by 
m4.tomsnet!.com (8.6.12/8.6.12) with ESMTP id PAA21932 
Received: from reb50.rs40_date.net (root(_at_)reb50(_dot_)rs_date(_dot_)net 
[289.36.1.176]) by tomsnet!.com (8.6.12/8.6.12) with ESMTP id PBA023891 for 
<zena(_at_)tomsnet!(_dot_)com>;
Received: from emoose.mail.n_bot.com (emoose.mx.n_bot.com [198.81.11.42]) by 
md.s#parpnet.net (8.7.4/8.7.3) with ESMTP id RAC035940 for <wayne_bobbit.com>;
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT
Received: from clift.b89_crost.com (clift.b89_crost.com [199.3.12.256]) by 
dot.2_bycentric.net (8.8.5/04/01 3.26)) id LAT131787;
Received: from spr_most.bix.45neter!.com(204.332.183.71) by 
hars11.ix.45neter!.com via smapt (V1.3) id smr0029301;


Have to love these bulk mail programs ...


-- 
Theo Van Dinter                                         
felicity(_at_)kluge(_dot_)net
Systems Administrator - {kluge.net,chrysalis.com}   
felicity(_at_)chrysalis(_dot_)com

<Prev in Thread] Current Thread [Next in Thread>