Document!
Joel S. Berson
Berson at ATT.NET
Mon May 13 23:48:52 UTC 2013
At 5/13/2013 06:17 PM, Victor Steinbok wrote:
>Unfortunately, because of the way this listserv
>processes messages, all the incoming headers are stripped, so there is
>no way to tell if the message is spoofed or actually sent from an
>infected computer.
I'm not sure this is true. With Eudora, I am able to ask to see
suppressed headers (which is what various sites ask for if one is
reporting phishing, fraud,, etc.) (Click on Blah Blah Blah.) I copy
below the headers I can read, which include a number of "Received
from" headers. I assume those below (earlier than) LISTSERV.UGA.EDU
are from whence ADS-L received the message in question.
Received: from mail-vc0-f170.google.com (mail-vc0-f170.google.com
[209.85.220.170]) by listserv.uga.edu (8.13.8/8.13.8) with ESMTP id
r4DMHRCt025405 for <ADS-L at listserv.uga.edu>; Mon, 13 May 2013
18:17:32 -0400
Received: by mail-vc0-f170.google.com with SMTP id gf12so5958870vcb.1 for
<ADS-L at listserv.uga.edu>; Mon, 13 May 2013 15:17:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
h=x-received:message-id:date:from:user-agent:mime-version:to:subject
:references:in-reply-to:content-type:content-transfer-encoding;
bh=b0KTbanQrHD+5MHqLdWChB+E4kw8HbonsvS3qY6YDME=;
b=L1TCmaS+/MzKCw2boxr9zzxuUdZ+FoO/P9HbU1qkLAdbp0qZ1kRq06eqv+2wIIGHgq
bhhAYa8KR8TkiL8ZCmO69V5t5wooFlLgzrw9Z3OZHTXoHcKknkeouaTPzwYriuSyxU6v
C7G6guMB1dcnT88NerVolylp9ws31LlD0wLKkSjhrevzipahR22KpO+ZX8QTGPqs3hLi
Sa2YNioLQn7ISLCnEWJZmsmeEiv5JrBnY2DiwBgJq1h4sFrj8dhDZTsItNjRHsuLQd+A
ZL2AgoK3jtLoiPqkKt5mKckLfwHyf3VmKI7rZ5JCf6iHPfNpw/OUkRTdMy9j8DA1hvYS
kfVQ==
X-Received: by 10.52.175.200 with SMTP id cc8mr16998353vdc.94.1368483446951;
Mon, 13 May 2013 15:17:26 -0700 (PDT)
Received: from [192.168.1.7] (pool-96-233-61-36.bstnma.fios.verizon.net.
[96.233.61.36]) by mx.google.com with ESMTPSA id
q5sm14751159vdj.5.2013.05.13.15.17.24 for <multiple recipients>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 13 May
2013 15:17:26 -0700 (PDT)
Joel
------------------------------------------------------------
The American Dialect Society - http://www.americandialect.org
More information about the Ads-l
mailing list