Re: Yahoo mail

[Derick Schuetz <dschuetz () AUSAM COM>]

Take a look at the headers that accompany the message that was received from
yahoo mail, you should see a line that resembles this:

Received: from [IP.THAT.WAS.USED] by web3305.mail.yahoo.com; Wed, 25 Oct
2000 10:05:13 PDT

Hotmail reveals the same type of information.

Derick Schuetz
dschuetz () ausam com

 -----Original Message-----
From:   Incidents Mailing List [mailto:INCIDENTS () SECURITYFOCUS COM]  On
Behalf Of Darren Welch
Sent:   Thursday, November 09, 2000 11:55 AM
To:     INCIDENTS () SECURITYFOCUS COM
Subject:        Yahoo mail

Hi everyone!

Someone in our company received an email from a person at Yahoo mail. I want
to track the source of the email but am I correct that the trace will only
lead me to the smtp server at Yahoo. Is there a way to find out the IP
address of the person before it got to the yahoo mail server without a
subpeona? Thanks

Darren Welch
Information Security Administrator
Wyeth Ayerst Laboratories
Phone: 610-902-2676
welchd () labs wyeth com