Document!

[Victor Steinbok]

Best I can tell, these are all headers generated by the listserv and
your own receiving service. The headers I was looking for are from the
sender's servers and incoming into the list, but the way the messages
are processed, it's not a re-send, so those don't get copied or
forwarded. Someone with more technical expertise can explain it better,
but, essentially, the message that comes in is stripped, copied and the
content is sent out as a new message rather than merely re-directed, as
is the case with some lists.

     VS-)

On 5/13/2013 7:48 PM, Joel S. Berson wrote:
> At 5/13/2013 06:17 PM, Victor Steinbok wrote:
>> Unfortunately, because of the way this listserv
>> processes messages, all the incoming headers are stripped, so there is
>> no way to tell if the message is spoofed or actually sent from an
>> infected computer.
> I'm not sure this is true.  With Eudora, I am able to ask to see
> suppressed headers (which is what various sites ask for if one is
> reporting phishing, fraud,, etc.)  (Click on Blah Blah Blah.)  I copy
> below the headers I can read, which include a number of "Received
> from" headers.  I assume those below (earlier than) LISTSERV.UGA.EDU
> are from whence ADS-L received the message in question.
>
> Received: from mail-vc0-f170.google.com (mail-vc0-f170.google.com
>             [209.85.220.170]) by listserv.uga.edu (8.13.8/8.13.8) with ESMTP id
>             r4DMHRCt025405 for <ADS-L at listserv.uga.edu>; Mon, 13 May 2013
>             18:17:32 -0400
> Received: by mail-vc0-f170.google.com with SMTP id gf12so5958870vcb.1 for
>             <ADS-L at listserv.uga.edu>; Mon, 13 May 2013 15:17:27 -0700 (PDT)
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
>                   h=x-received:message-id:date:from:user-agent:mime-version:to:subject
>                   :references:in-reply-to:content-type:content-transfer-encoding;
>                   bh=b0KTbanQrHD+5MHqLdWChB+E4kw8HbonsvS3qY6YDME=;
>                   b=L1TCmaS+/MzKCw2boxr9zzxuUdZ+FoO/P9HbU1qkLAdbp0qZ1kRq06eqv+2wIIGHgq
>                   bhhAYa8KR8TkiL8ZCmO69V5t5wooFlLgzrw9Z3OZHTXoHcKknkeouaTPzwYriuSyxU6v
>                   C7G6guMB1dcnT88NerVolylp9ws31LlD0wLKkSjhrevzipahR22KpO+ZX8QTGPqs3hLi
>                   Sa2YNioLQn7ISLCnEWJZmsmeEiv5JrBnY2DiwBgJq1h4sFrj8dhDZTsItNjRHsuLQd+A
>                   ZL2AgoK3jtLoiPqkKt5mKckLfwHyf3VmKI7rZ5JCf6iHPfNpw/OUkRTdMy9j8DA1hvYS
>                   kfVQ==
> X-Received: by 10.52.175.200 with SMTP id cc8mr16998353vdc.94.1368483446951;
>               Mon, 13 May 2013 15:17:26 -0700 (PDT)
> Received: from [192.168.1.7] (pool-96-233-61-36.bstnma.fios.verizon.net.
>             [96.233.61.36]) by mx.google.com with ESMTPSA id
>             q5sm14751159vdj.5.2013.05.13.15.17.24 for <multiple recipients>
>             (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 13 May
>             2013 15:17:26 -0700 (PDT)
>
> Joel

------------------------------------------------------------
The American Dialect Society - http://www.americandialect.org