Article View: best.abuse
Article #40Re: Confirmation of header analysis?
From: Catherine Hampton
Date: Tue, 17 Nov 1998 00:00
Date: Tue, 17 Nov 1998 00:00
64 lines
3501 bytes
3501 bytes
Ken Barr <ken@kenbarr.com> wrote: : 38.158.255.10 does indeed traceroute to hcc_nt1.heritagecoin.com, : but I'm not sure what the preceeding 10.10.10.10 "Received:" lines : mean (or don't mean) ... It means nothing -- they either have a misconfigured mail server that is printing internal/reserved IP addresses onto the mail headers, or software that forges headers to try to confuse people. :/ In this case, I suspect the first. : If someone more knowledgeable than me can : confirm that this came from heritagecoin.com, or provide an optional : scenario that provides reasonable doubt as to their guilt, I would : be appreciative. I wouldn't bet my life they're guilty, but I'd bet next month's paycheck. : FWIW, this turd came in a day after I criticized their business : practices on rec.collecting.coins, so I presume it may be coming : from their in-house Internet guru (i.e., postmaster/webmaster). : In case my complaint is legit and later requires escalation, is : PSI still a gaping black hole re UCE complaints, or have they : gotten their act together since the threatened UDP? PSI has definitely gotten their act together. I only wish other ISPs were as responsive as they have been of late. Catherine :> Received: from proxy1.ba.best.com (root@proxy1.ba.best.com [206.184.139.12]) :> by shell11.ba.best.com (8.9.0/8.9.0/best.sh) with ESMTP id BAA14478 :> for :> <kenbarr+XRCPT.6b656e62617272406b656e626172722e636f6d@shell11.ba.best.com>; :> Tue, 17 Nov 1998 01:29:07 -0800 (PST) :> From: jblack23@usa.net :> Received: from relay3.smtp.psi.net (relay3.smtp.psi.net [38.8.210.2]) :> by proxy1.ba.best.com (8.9.0/8.9.0/best.in) with ESMTP id BAA17217 :> for <kenbarr@kenbarr.com>; Tue, 17 Nov 1998 01:28:19 -0800 (PST) :> Received: from [38.158.255.10] (helo=HCC_NT1.HERITAGECOIN.COM) :> by relay3.smtp.psi.net with smtp (Exim 1.90 #1) :> id 0zfhQ6-0006Px-00; Tue, 17 Nov 1998 04:27:34 -0500 :> Received: from hcc_nt1(10.10.10.10) by hcc_fire :> via Gauntlet(2.0) Tue, 17 NOV 98 03:27:42 -0600 :> Received: from alpha (HCC_FIRE [10.10.10.27]) by HCC_NT1.HERITAGECOIN.COM :> with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.1960.3) :> id XBS4945R; Tue, 17 Nov 1998 03:27:28 -0600 :> Received: from hcc_nt1(10.10.10.10) by hcc_fire :> via Gauntlet(2.0) Tue, 17 NOV 98 03:27:34 -0600 :> To: jblack23@usa.net :> Subject: Increase Profits Online Today :> Message-Id: <E0zfhQ6-0006Px-00@relay3.smtp.psi.net> :> Date: Tue, 17 Nov 1998 04:27:34 -0500 :> X-Rcpt-To: kenbarr@kenbarr.com :> X-UIDL: f04a9d554ccd2dc45c04b069948ba9a0 : -- : Ken Barr Numismatics e-mail: ken@kenbarr.com : P. O. Box 32541 website: http://www.kenbarr.com : San Jose, CA 95152 (MPC, souvenir cards, Hickey Bros. tokens) : 408-272-3247 Next show: San Jose CC, 1/22-24/99
Technical Details
Message-ID:
<3651f7d0$0$12764@nntp1.ba.best.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<ken-ya02408000R1711981412320001@nntp.best.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 103890,5abbfdaebfa1a788
X-Google-Attributes: gid103890,public
From: Catherine Hampton <xzm@hrweb.org>
Subject: Re: Confirmation of header analysis?
Date: 1998/11/17
Message-ID: <3651f7d0$0$12764@nntp1.ba.best.com>
X-Deja-AN: 412927093
Distribution: best
References: <ken-ya02408000R1711981412320001@nntp.best.com>
X-Trace: nntp1.ba.best.com 911341520 12764 ariel@206.184.139.134
Organization: Virtual Studio and Workshop
User-Agent: tin/pre-1.4-980818 ("Laura") (UNIX) (FreeBSD/2.2.7-STABLE (i386))
Newsgroups: best.abuse