Spoofed mail. What to do ?
hi i recently got a mail which i *suspect* must have been spoofed (i think, from my classmates) but i can't say it beyond doubt. The info i garnered from the mail, including my email address itself (incase u have noticed,i got an MX recently), the contents of it are rather suspicious. But unfortunately the headers are quite ordinary, and it came from a webmail account, so i cant get any ident, finger , nothing on it. Is there any way , i can legitimately check whether the email was spoofed or not ? regards omicron -- ****** An optimist sees light at the end of every tunnel. A pessimist fears it might be of an incoming train. omicron@omicron.dyndns.org omicron.symonds.net C O G I T O E R G O S U M ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
If you look at the headers, you should be able to see the path the message took to get to you. Contact the admin in the next server in the list and see if he can trace the message by msgID. If he can, go to the next one back. If it was spoofed, you will eventually find an admin who cannot trace it. Cliff On Sun, 25 Feb 2001, omicron wrote:
hi i recently got a mail which i *suspect* must have been spoofed (i think, from my classmates) but i can't say it beyond doubt. The info i garnered from the mail, including my email address itself (incase u have noticed,i got an MX recently), the contents of it are rather suspicious. But unfortunately the headers are quite ordinary, and it came from a webmail account, so i cant get any ident, finger , nothing on it. Is there any way , i can legitimately check whether the email was spoofed or not ?
regards omicron
-- ****** An optimist sees light at the end of every tunnel. A pessimist fears it might be of an incoming train.
omicron@omicron.dyndns.org omicron.symonds.net
C O G I T O E R G O S U M ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
see if he can trace the message by msgID. If he can, go to the next one back. Speaking of which I have always been curious as to how to trace an e-mail by msgID. Because obviously when I cat my /var/log/mail I can see the msgID but from there what to do with it in order to get the full headers or trace the sender always beats me. Cliff > On Sun, 25 Feb 2001, omicron wrote:
hi i recently got a mail which i *suspect* must have been spoofed (i think, from my classmates) but i can't say it beyond doubt. The info i garnered from the mail, including my email address itself (incase u have noticed,i got an MX recently), the contents of it are rather suspicious. But unfortunately the headers are quite ordinary, and it came from a webmail account, so i cant get any ident, finger , nothing on it. Is there any way , i can legitimately check whether the email was spoofed or not ?
regards omicron
-- ****** An optimist sees light at the end of every tunnel. A pessimist fears it might be of an incoming train.
omicron@omicron.dyndns.org omicron.symonds.net
C O G I T O E R G O S U M ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
participants (3)
-
Cliff Friedel -
omicron -
semat