Date:         Tue, 25 Sep 2001 09:39:54 -0400
Reply-To:     David Beierl <dbeierl@ATTGLOBAL.NET>
Sender:       Vanagon Mailing List <vanagon@gerry.vanagon.com>
From:         David Beierl <dbeierl@ATTGLOBAL.NET>
Subject:      Re: spammed after sending to the list ?
Comments: To: Mick Kalber <hotlava@INTERPAC.NET>
In-Reply-To:  <014401c145a4$609adf00$ee2bd5d1@hotlava>
Content-Type: text/plain; charset="us-ascii"; format=flowed

At 05:27 AM 9/25/2001, Mick Kalber wrote:
>the snow white virus has been coming from one or more listmembers for
>several months.  I have received it (but never opened it) numerous times.
>it is a self-replicating virus (worm actually)that attaches itself to the

You can't tell who it's coming from without going to the message headers
and tracing back the Received From: lines to get to the original sender's
IP address.  Even then you will probably get an address that can only be
tied to a particular computer by having the owner of that address compare
their logs to see who was dialled in on that line at the time in question.

On the other hand, if the IP address is 24.180.6.148 you can be pretty
confident that the mail came from one of the machines on my network, since
that's a stable address that belongs to us semi-permanently.  This is true
of many but not all cable modem users.

david

David Beierl - Providence, RI
  http://pws.prserv.net/synergy/Vanagon/
'84 Westy "Dutiful Passage"
'85 GL "Poor Relation"