Document!

Joel S. Berson Berson at ATT.NET
Mon May 13 23:48:52 UTC 2013


At 5/13/2013 06:17 PM, Victor Steinbok wrote:
>Unfortunately, because of the way this listserv
>processes messages, all the incoming headers are stripped, so there is
>no way to tell if the message is spoofed or actually sent from an
>infected computer.

I'm not sure this is true.  With Eudora, I am able to ask to see
suppressed headers (which is what various sites ask for if one is
reporting phishing, fraud,, etc.)  (Click on Blah Blah Blah.)  I copy
below the headers I can read, which include a number of "Received
from" headers.  I assume those below (earlier than) LISTSERV.UGA.EDU
are from whence ADS-L received the message in question.

Received: from mail-vc0-f170.google.com (mail-vc0-f170.google.com
           [209.85.220.170]) by listserv.uga.edu (8.13.8/8.13.8) with ESMTP id
           r4DMHRCt025405 for <ADS-L at listserv.uga.edu>; Mon, 13 May 2013
           18:17:32 -0400
Received: by mail-vc0-f170.google.com with SMTP id gf12so5958870vcb.1 for
           <ADS-L at listserv.uga.edu>; Mon, 13 May 2013 15:17:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
                 h=x-received:message-id:date:from:user-agent:mime-version:to:subject
                 :references:in-reply-to:content-type:content-transfer-encoding;
                 bh=b0KTbanQrHD+5MHqLdWChB+E4kw8HbonsvS3qY6YDME=;
                 b=L1TCmaS+/MzKCw2boxr9zzxuUdZ+FoO/P9HbU1qkLAdbp0qZ1kRq06eqv+2wIIGHgq
                 bhhAYa8KR8TkiL8ZCmO69V5t5wooFlLgzrw9Z3OZHTXoHcKknkeouaTPzwYriuSyxU6v
                 C7G6guMB1dcnT88NerVolylp9ws31LlD0wLKkSjhrevzipahR22KpO+ZX8QTGPqs3hLi
                 Sa2YNioLQn7ISLCnEWJZmsmeEiv5JrBnY2DiwBgJq1h4sFrj8dhDZTsItNjRHsuLQd+A
                 ZL2AgoK3jtLoiPqkKt5mKckLfwHyf3VmKI7rZ5JCf6iHPfNpw/OUkRTdMy9j8DA1hvYS
                 kfVQ==
X-Received: by 10.52.175.200 with SMTP id cc8mr16998353vdc.94.1368483446951;
             Mon, 13 May 2013 15:17:26 -0700 (PDT)
Received: from [192.168.1.7] (pool-96-233-61-36.bstnma.fios.verizon.net.
           [96.233.61.36]) by mx.google.com with ESMTPSA id
           q5sm14751159vdj.5.2013.05.13.15.17.24 for <multiple recipients>
           (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 13 May
           2013 15:17:26 -0700 (PDT)

Joel

------------------------------------------------------------
The American Dialect Society - http://www.americandialect.org



More information about the Ads-l mailing list