Um, no. The LIoyd messages don't emanate from Emory. Re-examine the headers (which have been forged somewhat) From: (LIoyd Parker) Newsgroups: rec.autos.makers.chrysler Subject: Re: 300M vs Nissan Altima Date: 7 Jul 2003 15:40:21 -0700 Organization: http://groups.google.com/ Lines: 74 Message-ID: <> References: <bdv35i$q$> <> <be1g4c$4en$> <> <be8696$h4m$> <> <bec0qu$5a$> <> NNTP-Posting-Host: 216.75.185.197 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Trace: posting.google.com 1057617622 9085 127.0.0.1 (7 Jul 2003 22:40:22 GMT) X-Complaints-To: NNTP-Posting-Date: 7 Jul 2003 22:40:22 GMT Path: <snipped> *********************************************** The References field is used for threading. The real meat-n-potatoes is the NNTP-Posting-Host field, which is hard to forge as it's added by the Usenet server. The Google stuff is probably forged. The posting host IP is registered to: OrgName: Golden Triangle On Line OrgID: GTO Address: 279 King St. W. Third Floor City: Kitchener StateProv: ON PostalCode: N2G 1B6 Country: CA NetRange: 216.75.160.0 - 216.75.191.255 CIDR: 216.75.160.0/19 NetName: GOLDEN-BLK-3 NetHandle: NET-216-75-160-0-1 Parent: NET-216-0-0-0-0 NetType: Direct Allocation NameServer: NS.GOLDEN.NET NameServer: NS2.GOLDEN.NET Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: 2001-07-24 Updated: 2002-05-23 TechHandle: FD194-ARIN TechName: <snipped> Looks to me like the source NNTP server is about an hour's drive west of Toronto. Emory is in Metro Atlanta. --Geoff
Thanks for that analysis. I thought that the References also gave real info about the source. For my info (as I am retaining this exchange), what do you mean by "used for threading" in this case? Can this be forged? DAS
Thank you. Much appreciated. Now if only I could use that info and instantly sock it to all those spammers offering me penis enlargement, breast enlargement, money transfer arrangements, dates in my area, pics of Asian babes and home loans in the USA... ) DAS
