From owner-freebsd-questions@FreeBSD.ORG Wed May 18 18:31:11 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8374816A4CE for ; Wed, 18 May 2005 18:31:11 +0000 (GMT) Received: from mail.adventuras.no (mail.adventuras.no [194.63.250.215]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6B23543DC9 for ; Wed, 18 May 2005 18:31:10 +0000 (GMT) (envelope-from lars+lister.freebsd@adventuras.no) Received: from cm-84.118.177.041.chello.no (cm-84.118.177.041.chello.no [84.118.177.41]) (authenticated bits=0) by mail.adventuras.no (8.12.10/8.12.10) with ESMTP id j4IIRsW9032648 (version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO) for ; Wed, 18 May 2005 20:28:02 +0200 Date: Wed, 18 May 2005 20:27:53 +0200 From: Lars Kristiansen To: freebsd-questions@freebsd.org Message-ID: In-Reply-To: <428B7BE8.8050605@dial.pipex.com> References: <8C72933FE6C89D0-B0C-45179@FWM-D38.sysops.aol.com> <428B7BE8.8050605@dial.pipex.com> X-Mailer: Mulberry/3.1.6 (Linux/x86) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Adventuras-MailScanner-Information: Please contact the ISP for more information X-Adventuras: du kan filtrere etter AdvSpamScore over 5-10 X-Adventuras-SpamCheck: not spam, SpamAssassin (timed out) X-MailScanner-From: lars+lister.freebsd@adventuras.no Subject: Re: Finding out original source of e-mail X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 May 2005 18:31:11 -0000 >> I'm trying to find the true souce of this e-mail.....is it possible to >> do this?> Looking at the first received line shows that FWM-D38.sysops.aol.com > received the email from 204.214.222.51. Usually you would expect to see > a name associated with that address, but in this case there isn't. Spammers sometimes add headers to confuse antispamsoftware. Only the last added "Received: " header can be trusted. That one was added by "your" mailserver, and contains information as seen from there. If you want to confirm the information from the next steps you will need access to logs on servers involved. > My advice? Forget about it and throw it in the bin where it belongs. agreed -- Hilsen Lars