Great Circle Associates Firewalls
(August 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Mail bombing made legal...
From: Ryan Mooney <ryan @ pcslink . com>
Date: Wed, 6 Aug 1997 11:05:12 -0700 (MST)
To: nick @ gsionline . com (Nick Keenan)
Cc: vslabs @ onwe . co . za, firewalls @ GreatCircle . COM
In-reply-to: <3 . 0 . 1 . 32 . 19970805095834 . 009a87b8 @ peter> from "Nick Keenan" at Aug 5, 97 09:58:34 am

> 
> >You can trace the any e-mail back to the
> >original SMTP server using the headers. Fake headers are usually easy to
> >spot. 	
> 
> I think you're being a little Unix-centric.  What if I have a Windows NT
> machine, and I load up NTmail (a SMTP server for NT), and I get an IP
> address from my favorite ISP -- perhaps aol.com, perhaps some small local
> operation -- and I start blasting out spam.  How's anyone going to be able
> to trace that?

Fairly easily.  I can at least trace it back to the fact that you were
logged in to aol, or some local operation....  At that point I'm
relying on the fact that they can trace who was on what port at what
time (always a good question).  If they can't I'm SOL, if they can I
would expect them to LART you appropriately.

>-=-=-=-=-=-=-<>-=-=-=-=-=-<>-=-=-=-=-=-<>-=-=-=-=-=-<>-=-=-=-=-=-=-<
Ryan Mooney           Phone (602)265-9188         PCSLink
ryan @
 pcslink .
 com                            Internet Services
	      Quidquid Latine Dictum Sit, Altum Videtur.
<-=-=-=-=-=-=-><-=-=-=-=-=-><-=-=-=-=-=-><-=-=-=-=-=-><-=-=-=-=-=-=-> 


Follow-Ups:
References:
Indexed By Date Previous: Re: Mail bombing made legal...
From: Ryan Mooney <ryan @ pcslink . com>
Next: Proxy telnet client
From: Santi Ribas <santi @ browns . co . uk>
Indexed By Thread Previous: Re: Mail bombing made legal...
From: Richard Pouncy <prc @ Noah . rtscomp . com>
Next: Re: Mail bombing made legal...
From: Ronald Lachenal <rml @ dulcea . iconn . com . ph>

Google
 
Search Internet Search www.greatcircle.com