Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 3 Mar 1998 11:46:31 -0800 (PST)
From:      perl <perl@netmug.org>
To:        Doug White <dwhite@resnet.uoregon.edu>
Cc:        Thomas Dean <tomdean@ix.netcom.com>, questions@FreeBSD.ORG
Subject:   Re: Tracing Mail
Message-ID:  <Pine.BSF.3.96.980303114424.18707B-100000@netmug.org>
In-Reply-To: <Pine.BSF.3.96.980303112638.20782B-100000@gdi.uoregon.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 3 Mar 1998, Doug White wrote:

> On Sat, 28 Feb 1998, Thomas Dean wrote:
> 
> > I received this mail, appearing as if I sent it.  From complaints I
> > have received from others, "Peter Meerwald" <seawood@very.priv.at>,
> > for one, I think this person(s) is sending mail to others.  I want to
> > take this person to task.
> > 
> > So, How do I locate him?
> > 
> > I have traced this as far as tnt18.lax3.da.uu.net and complained to
> > root and webmaster there.
> 
> You complained to root and webmaster at a router :-)  Traceroute barfs
> from a Host Unreachable at that point, so it's possible that IP
> (208.254.129.221) is forged.  You might try bothering postmaster and
> abuse@uu.net and see if they can trace that IP back further. Do a
> traceroute and send them the output.
> 
> > Received: from popd.ix.netcom.com (celebris.tddhome [192.168.1.3])
> 
> celebris must be your box, that's an invalid IP.

celebris could also be the box at the sender's end if the celebris goes 
through a NAT box.

Michael


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980303114424.18707B-100000>