🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: be.comp.security
Article #1332

Re: Nou nog mooier

#1332
From: Dirk Claessens
Date: Sun, 31 Aug 2003 10:34
45 lines
2738 bytes
on 27 aug 2003,    "Rudi S."   wrote in be.comp.security :

> Iemand gebruikt mijn emailadres om te spammen
> 
> of zie ik dat verkeert?


Ja en nee :0)

In een SMTP-header kun je invullen wat je wil.
Spammers ( maar ook vele mailvirussen) gebruiken deze techniek veel, om het 
"moeilijk te maken".

Het enige wat echt telt, is het IP van de afzender, ongeacht zijn naam.
Dat zit hieronder :

> Received: from matrix ([200.140.118.150]) by smtp30.wxs.nl with Microsoft
> SMTPSVC(5.0.2195.5329);
>   Wed, 27 Aug 2003 13:48:42 +0200
> From: "andromeda" <andromeda@planetinternet.be>
> To: "andromeda" <andromeda@planetinternet.be>

"Matrix" zit op IP [200.140.118.150], en is in werkelijkheid:

200-140-118-150.cbabm7005.dsl.brasiltelecom.net.br

=============
08/31/03 12:26:58 dig 200.140.118.150 @ 195.130.130.132
Dig 150.118.140.200.in-addr.arpa@195.130.130.132 ...
Authoritative Answer
Recursive queries supported by this server
 Query for 150.118.140.200.in-addr.arpa type=255 class=1
  150.118.140.200.in-addr.arpa PTR (Pointer) 200-140-118-
150.cbabm7005.dsl.brasiltelecom.net.br
  118.140.200.in-addr.arpa NS (Nameserver) ns3.brasiltelecom.net.br
  118.140.200.in-addr.arpa NS (Nameserver) ns4.brasiltelecom.net.br
  ns3.brasiltelecom.net.br A (Address) 200.199.241.38
  ns4.brasiltelecom.net.br A (Address) 200.199.241.17
[..]

-- 
Dirk.
   If we don't succeed, we run the risk of failure. - George W. Bush 

   http://users.pandora.be/dirk.claessens2/
Technical Details
Message-ID: <Xns93E87FE93A911FlyingCircus@195.130.132.70>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-04!sn-xit-01!sn-xit-09!supernews.com!ngpeer.news.aol.com!newsfeed1!bredband!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!skynet.be!skynet.be!skynet.be!skynet.be!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail
References: <bii6no$fnm$1@reader10.wxs.nl>

Show Full Headers
Complete Article Headers
X-Google-Language: DUTCH,ASCII-7-bit
X-Google-Thread: 113446,4afbbe76c400097b
X-Google-Attributes: gid113446,public
X-Google-ArrivalTime: 2003-08-31 03:34:28 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-04!sn-xit-01!sn-xit-09!supernews.com!ngpeer.news.aol.com!newsfeed1!bredband!news.tele.dk!news.tele.dk!small.news.tele.dk!newsgate.cistron.nl!skynet.be!skynet.be!skynet.be!skynet.be!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail
Newsgroups: be.comp.security
Subject: Re: Nou nog mooier
From: Dirk Claessens <will.bounce@invalid>
References: <bii6no$fnm$1@reader10.wxs.nl>
Organization: BicycleRepairMan@Monty.Python
Message-ID: <Xns93E87FE93A911FlyingCircus@195.130.132.70>
User-Agent: Xnews/5.04.25
X-Face: -FoHD=Akuqpvt&-Vod;;D+TH?Rx7|Jy=Mw!L"[a10~%4=nG?Za/#]S~|#X;>fh>8g"?-(^e 1PB{{A`hJ;8)Ro<ZSHVdZ<0UBi3pMZTA5\KH&K/$bDfDqY+%A$i$ui&;8C;7{h>P"(\s7WKg#WbEVC heW-\(kY4C]HafapoDCH[vW5)Y~;,HtDC>|(b5n6_gr\gou[v^=}uTAB}ozh
Lines: 45
Date: Sun, 31 Aug 2003 10:34:27 GMT
NNTP-Posting-Host: 81.164.120.209
X-Complaints-To: abuse@telenet.be
X-Trace: phobos.telenet-ops.be 1062326067 81.164.120.209 (Sun, 31 Aug 2003 12:34:27 MEST)
NNTP-Posting-Date: Sun, 31 Aug 2003 12:34:27 MEST