Great Circle Associates Firewalls
(August 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Website to Fake email as a service
From: John Cross <jcross @ grtk . com>
Date: Tue, 5 Aug 1997 17:24:48 -0400
To: Firewalls @ GreatCircle . COM

What will they think of next.  Yes, www.aprilfools.com will allow you to
generate a fake email from anyone and send it to someone else as a
"joke".  It has a preconfigured form for its standard 'smut surfer'
alerts and so forth, but it is totally editable, so you can send
anything you want.  My CFO received a message from the head of HR
warning him about his Internet surfing habits.  Needless to say, the
wording and so forth was not well received.

Well, for list content, how can I track who initiated the mail message?
I tracked the headers back to the mail server of the www.aprilfools.com
site, and contacted the administrator there.  He was actually helpful
and gave me the IP address of the browser that initiated the mail form.
Anyone know how I can take that IP address and trace it back to a source
domain?  I can ping the address, but I don't know how to do a reverse
lookup on IP to get a domain name so I can contact that administrator to
track the address further.  (Someone mentioned DIG, but I have no idea
what that is)

Also, anyone have suggestions for protecting my uneducated users from
further spoofed mail?


Thanks,
John


Follow-Ups:
Indexed By Date Previous: Best Practice? - internet + multiple RAS
From: Bret Watson <Bret . Watson @ bwa . net>
Next: Re: Bloomberg -Reply -Reply
From: "Samuel T. Baker" <sbaker @ mail . state . tn . us>
Indexed By Thread Previous: Re: Best Practice? - internet + multiple RAS
From: "Peter Vaterlaus EDV-Systemberatung" <edv @ vaterlaus . ch>
Next: Re: Website to Fake email as a service
From: Jesse Brown <bextreme @ pobox . com>

Google
 
Search Internet Search www.greatcircle.com