Home page logo

basics logo Security Basics mailing list archives

Re: OT: IP of the originating machine from a gmail email
From: krymson () gmail com
Date: 31 Dec 2007 14:08:29 -0000

I've always wanted to get around to testing this with Gmail, but I've seen Hotmail and Yahoo leak the originating IP in 
the past (not sure if it still does). Here's my testing:

1) Send an email from your gmail account to some other account you control. Use the web interface when composing the 
email. Check the headers when you get it. I don't expect this to show anything except Gmail's server IP.

2) Send an email from your gmail account to some other account you control. Use a fat email client (Outlook, Eudora...) 
to compose the message and connect to Gmail to send it. With other services, this sometimes leaks the IP of the sender 
in the header info.

Or ask Google if you have a legal reason.

You could also be a bit more active. Reply to the Gmail account you want to probe, but include an embedded image hosted 
on some remote server. When the mail message is viewed, most people should still auto-load images and you'll see the 
originating IP in your logs. This is not foolproof; you need a web server, need them to check from an identifying 
location, need them to view images, and so on. This should work better if you Google the email address and try to 
appeal to the interests of the user based on the resulting research...

<- snip ->

I was wondering if there is a way to get the IP address of the machine
that was used to compose an email that was sent using gmail?


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]