From owner-freebsd-questions Tue Mar 3 11:47:25 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA15579 for freebsd-questions-outgoing; Tue, 3 Mar 1998 11:47:25 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from netmug.org (perl@netmug.org [207.88.43.66]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA15570 for ; Tue, 3 Mar 1998 11:47:13 -0800 (PST) (envelope-from perl@netmug.org) Received: from localhost (perl@localhost) by netmug.org (8.8.8/NetMUG_1.0.0) with SMTP id LAA20739; Tue, 3 Mar 1998 11:46:31 -0800 (PST) Date: Tue, 3 Mar 1998 11:46:31 -0800 (PST) From: perl To: Doug White cc: Thomas Dean , questions@FreeBSD.ORG Subject: Re: Tracing Mail In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 3 Mar 1998, Doug White wrote: > On Sat, 28 Feb 1998, Thomas Dean wrote: > > > I received this mail, appearing as if I sent it. From complaints I > > have received from others, "Peter Meerwald" , > > for one, I think this person(s) is sending mail to others. I want to > > take this person to task. > > > > So, How do I locate him? > > > > I have traced this as far as tnt18.lax3.da.uu.net and complained to > > root and webmaster there. > > You complained to root and webmaster at a router :-) Traceroute barfs > from a Host Unreachable at that point, so it's possible that IP > (208.254.129.221) is forged. You might try bothering postmaster and > abuse@uu.net and see if they can trace that IP back further. Do a > traceroute and send them the output. > > > Received: from popd.ix.netcom.com (celebris.tddhome [192.168.1.3]) > > celebris must be your box, that's an invalid IP. celebris could also be the box at the sender's end if the celebris goes through a NAT box. Michael To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message