Finding out original source of e-mail

Lars Kristiansen lars+lister.freebsd at adventuras.no
Wed May 18 11:31:11 PDT 2005


>> I'm trying to find the true souce of this e-mail.....is it possible to
>> do this?> Looking at the first received line shows that 
FWM-D38.sysops.aol.com
> received the email from  204.214.222.51.  Usually you would expect to see
> a name associated with that address, but in this case there isn't.

Spammers sometimes add headers to confuse antispamsoftware.
Only the last added "Received: " header can be trusted. That one was added 
by "your" mailserver, and contains information as seen from there. If you 
want to confirm the information from the next steps you will need access to 
logs on servers involved.

> My advice?  Forget about it and throw it in the bin where it belongs.

agreed


--
Hilsen Lars



More information about the freebsd-questions mailing list