in looking at the source of an email, is there anyway to tell where the point of origin is? this is very important, I need to be able to do this ASAP.

Received: from xxxxx.mail.xxxx.com (123.222.222.222)
by company.com with SMTP; 25 Jun 2001 01:34:07 -0000

does it mean the company.com is the originating point for the email??
this is important, I need to do this ASAP and br able to verify it.

__________________
Webmaster of Certifyd Forums

and the new Free Classifed Ads

Last edited by gizmo on 06-28-01 at 12:12 AM

Report this post to a moderator

Do "whois company.com" at a command line. Then use "nslookup" to look up the SOA. That should give you some more information to work with.

Report this post to a moderator

Hey Gizmo:

BookMark or Make a Favorite of this Web-Site www.network-tools.com I learned about it while I was reading the i-Net+ Book by Osborne/Syngress/McGraw-Hill! I had a emergency come up when the folks at www.china.com decided they wanted to "spoof" my IP address and intercept ALL my e-mail, etc... Really Pissed-Me-Off and is "Illegal", but the FBI won't do much unless $5000.00+ in damage is done -- their to busy with the bigger Internet security problems...

If you are having a problem at home or at the office with Hackers and such, I would suggest you either download ZoneAlarm from www.zonelabs.com for FREE (Software Firewall) or buy their professional version for the office!! It will alert you real-time of intruders on your computer with port access numbers and ALL. You will get the info of who is their ISP,IP Address, DNS address with Start of Authority record, computer name attacking, what TCP port on their PC is trying to connect, will ask for your advise what to do next and creates a very good log file that you can give to your boss or the appropriate law enforcement folks.

Also check out the web-site for other cool utilities: www.analogx.com -- ALL for FREE!! You might also want to read the article on http://grc.com/dos/grcdos.htm where a 13yr kid played havic on the wrong kind of person/company very good story but is long - give to the boss and he might FREAK-OUT, happened these past several weeks.

Good luck with your problem(s),

Doug

Last edited by Doug_Black on 07-01-01 at 08:50 AM

Report this post to a moderator