🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: best.abuse
Article #40

Re: Confirmation of header analysis?

#40
From: Catherine Hampton
Date: Tue, 17 Nov 1998 00:00
64 lines
3501 bytes
Ken Barr <ken@kenbarr.com> wrote:

: 38.158.255.10 does indeed traceroute to hcc_nt1.heritagecoin.com,
: but I'm not sure what the preceeding 10.10.10.10 "Received:" lines
: mean (or don't mean) ...  

It means nothing -- they either have a misconfigured mail server
that is printing internal/reserved IP addresses onto the mail
headers, or software that forges headers to try to confuse people. :/
In this case, I suspect the first.

: If someone more knowledgeable than me can 
: confirm that this came from heritagecoin.com, or provide an optional
: scenario that provides reasonable doubt as to their guilt, I would
: be appreciative.

I wouldn't bet my life they're guilty, but I'd bet next month's
paycheck.

: FWIW, this turd came in a day after I criticized their business
: practices on rec.collecting.coins, so I presume it may be coming
: from their in-house Internet guru (i.e., postmaster/webmaster).  
: In case my complaint is legit and later requires escalation, is 
: PSI still a gaping black hole re UCE complaints, or have they 
: gotten their act together since the threatened UDP?  

PSI has definitely gotten their act together.  I only wish other
ISPs were as responsive as they have been of late.


Catherine


:> Received: from proxy1.ba.best.com (root@proxy1.ba.best.com [206.184.139.12])
:>    by shell11.ba.best.com (8.9.0/8.9.0/best.sh) with ESMTP id BAA14478
:>    for
:> <kenbarr+XRCPT.6b656e62617272406b656e626172722e636f6d@shell11.ba.best.com>;
:>  Tue, 17 Nov 1998 01:29:07 -0800 (PST)
:> From: jblack23@usa.net
:> Received: from relay3.smtp.psi.net (relay3.smtp.psi.net [38.8.210.2])
:>    by proxy1.ba.best.com (8.9.0/8.9.0/best.in) with ESMTP id BAA17217
:>    for <kenbarr@kenbarr.com>; Tue, 17 Nov 1998 01:28:19 -0800 (PST)
:> Received: from [38.158.255.10] (helo=HCC_NT1.HERITAGECOIN.COM)
:>    by relay3.smtp.psi.net with smtp (Exim 1.90 #1)
:>    id 0zfhQ6-0006Px-00; Tue, 17 Nov 1998 04:27:34 -0500
:> Received: from hcc_nt1(10.10.10.10) by hcc_fire
:>  via Gauntlet(2.0) Tue, 17 NOV 98 03:27:42 -0600
:> Received: from alpha (HCC_FIRE [10.10.10.27]) by HCC_NT1.HERITAGECOIN.COM
:> with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.1960.3)
:>    id XBS4945R; Tue, 17 Nov 1998 03:27:28 -0600
:> Received: from hcc_nt1(10.10.10.10) by hcc_fire
:>  via Gauntlet(2.0) Tue, 17 NOV 98 03:27:34 -0600
:> To: jblack23@usa.net
:> Subject: Increase Profits Online Today
:> Message-Id: <E0zfhQ6-0006Px-00@relay3.smtp.psi.net>
:> Date: Tue, 17 Nov 1998 04:27:34 -0500
:> X-Rcpt-To: kenbarr@kenbarr.com
:> X-UIDL: f04a9d554ccd2dc45c04b069948ba9a0

: -- 
: Ken Barr Numismatics     e-mail:  ken@kenbarr.com
: P. O. Box 32541          website:  http://www.kenbarr.com
: San Jose, CA 95152     (MPC, souvenir cards, Hickey Bros. tokens)
: 408-272-3247               Next show:  San Jose CC, 1/22-24/99
Technical Details
Message-ID: <3651f7d0$0$12764@nntp1.ba.best.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <ken-ya02408000R1711981412320001@nntp.best.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 103890,5abbfdaebfa1a788
X-Google-Attributes: gid103890,public
From: Catherine Hampton <xzm@hrweb.org>
Subject: Re: Confirmation of header analysis?
Date: 1998/11/17
Message-ID: <3651f7d0$0$12764@nntp1.ba.best.com>
X-Deja-AN: 412927093
Distribution: best
References: <ken-ya02408000R1711981412320001@nntp.best.com>
X-Trace: nntp1.ba.best.com 911341520 12764 ariel@206.184.139.134
Organization: Virtual Studio and Workshop
User-Agent: tin/pre-1.4-980818 ("Laura") (UNIX) (FreeBSD/2.2.7-STABLE (i386))
Newsgroups: best.abuse