Re: Yahoo mail

["J. Oquendo" <intrusion () ENGINEER COM>]

This can be circumvented and is almost always done so by people using proxies so in order to track THAT down you would 
have to e-mail the administrators of the proxy server and hope they would be helpful enough to mail you logs, but you 
should be advised and common sense should tell you logfiles can easily be manipulated so they're pretty much worthless 
in any case. (Ain't that right ;P)

Chances of you tracking someone who used a proxy is very slim since there are plenty of misconfigured proxy servers 
around which allow just about anyone to use them without logging, etc.

My two cents

sil () antioffline com sil () disgraced org

------Original Message------
From: Sean Sosik-Hamor <ssh () SHN NU>
To: INCIDENTS () SECURITYFOCUS COM
Sent: November 10, 2000 7:35:29 PM GMT
Subject: Re: Yahoo mail


On Thu, 9 Nov 2000, Darren Welch wrote:

> Someone in our company received an email from a person at Yahoo
> mail. I want to track the source of the email but am I correct that
> the trace will only lead me to the smtp server at Yahoo. Is there a
> way to find out the IP address of the person before it got to the
> yahoo mail server without a subpeona? Thanks

If you look at the headers there should be an X-Originating-IP: line
telling you the IP address of the sender.  I know Hotmail does this,
which is why I stopped using them.  Yahoo probably does it as well to
curb Net abuse.

/Sean/

______________________________________________
FREE Personalized Email at Mail.com
Sign up at http://www.mail.com/?sr=signup