Re: Routing vraag: Spam met fake origin IP: niets aan te doen?

Article View: be.comp.security

Article #1135

#1135

From: Peter Peters
Date: Fri, 14 Nov 2003 15:24

28 lines
2322 bytes

On Fri, 14 Nov 2003 15:45:45 +0100, Wannes <Wannes@gmx.net.invalid>
wrote:

>>> Received: from 52-135.240.81.adsl.skynet.be (52-135.240.81.adsl.skynet.be
>>> [81.240.135.52])
>>>  by iris.telenet-ops.be (Postfix) with SMTP
>>>  id C5F1338438; Fri, 14 Nov 2003 07:14:33 +0100 (MET)
>> 
>> Bovenstaande Received-header is nog echt
>
>Waarom doe je die dan even later af als fake ?

Wanneer?

>>> Received: from [179.79.169.80]     <<=== *onmogelijk?
>>>  by 52-135.240.81.adsl.skynet.be id <0971521-69679>;
>>>  Fri, 14 Nov 2003 12:09:44 +0600
>> 
>> Maar deze is fake.
>
>From: is fake, by 52-135.240.81.adsl.skynet.be niet

De spammer kan ook die by gewoon faken. Dat het in dit geval niet zo is
duidt op ofwel een slimme spammer ofwel een luie spammer. Aan jou de
keus.

-- 
Spammers overtreden de wet op de computercriminaliteit.

Technical Details

Message-ID: <6rs9rvohe9h0ntvk4hcfbpjeg9lejmunet@4ax.com>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!news.cambrium.nl!news.cambrium.nl!news.cambrium.nl!humbolt.nl.linux.org!news.nl.linux.org!news.utwente.nl!not-for-mail

References:

<VU4tb.22841$kz6.667788@phobos.telenet-ops.be> <slrnbr9pmu.2s8.usenet@bender.home.hensema.net> <BBDAA929.B84E7%Wannes@gmx.net.invalid>

Show Full Headers

Complete Article Headers

X-Google-Language: DUTCH,ASCII-7-bit
X-Google-Thread: 113446,281f9f8044d690d6
X-Google-Attributes: gid113446,public
X-Google-Thread: fce68,281f9f8044d690d6
X-Google-Attributes: gidfce68,public
X-Google-Thread: 106e3d,281f9f8044d690d6
X-Google-Attributes: gid106e3d,public
X-Google-ArrivalTime: 2003-11-14 07:24:44 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!news.maxwell.syr.edu!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!news.cambrium.nl!news.cambrium.nl!news.cambrium.nl!humbolt.nl.linux.org!news.nl.linux.org!news.utwente.nl!not-for-mail
From: Peter Peters <P.G.M.Peters@nospam.utwente.net>
Newsgroups: be.comp.security,be.providers,nl.internet.misbruik
Subject: Re: Routing vraag: Spam met fake origin IP: niets aan te doen?
Date: Fri, 14 Nov 2003 16:24:40 +0100
Organization: Universiteit Twente
Lines: 28
Message-ID: <6rs9rvohe9h0ntvk4hcfbpjeg9lejmunet@4ax.com>
References: <VU4tb.22841$kz6.667788@phobos.telenet-ops.be> <slrnbr9pmu.2s8.usenet@bender.home.hensema.net> <BBDAA929.B84E7%Wannes@gmx.net.invalid>
Reply-To: peter.peters@utwente.nl
NNTP-Posting-Host: civ-tens022.itbe.utwente.nl
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Trace: netlx020.civ.utwente.nl 1068823481 30162 130.89.36.21 (14 Nov 2003 15:24:41 GMT)
X-Complaints-To: abuse@utwente.nl
NNTP-Posting-Date: Fri, 14 Nov 2003 15:24:41 +0000 (UTC)
X-Newsreader: Forte Agent 1.92/32.572

Reply to Parent Message