LIoyd is not at Emory

[Geoff]

But Lloyd and LIoyd's msgs emanate from Emory U.

Is the 'impersonator' in his department...?...

Um, no.

The LIoyd messages don't emanate from Emory. Re-examine the headers (which
have been forged somewhat)

From: [email protected] (LIoyd Parker)
Newsgroups: rec.autos.makers.chrysler
Subject: Re: 300M vs Nissan Altima
Date: 7 Jul 2003 15:40:21 -0700
Organization: http://groups.google.com/
Lines: 74
Message-ID: <[email protected]>
References: <[email protected]>
<[email protected]>
<[email protected]> <[email protected]>
<[email protected]> <[email protected]>
<[email protected]> <[email protected]>
NNTP-Posting-Host: 216.75.185.197
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: posting.google.com 1057617622 9085 127.0.0.1 (7 Jul 2003 22:40:22
GMT)
X-Complaints-To: [email protected]
NNTP-Posting-Date: 7 Jul 2003 22:40:22 GMT
Path: <snipped>

***********************************************

The References field is used for threading. The real meat-n-potatoes is the
NNTP-Posting-Host field, which is hard to forge as it's added by the Usenet
server. The Google stuff is probably forged.

The posting host IP is registered to:


OrgName: Golden Triangle On Line
OrgID: GTO
Address: 279 King St. W. Third Floor
City: Kitchener
StateProv: ON
PostalCode: N2G 1B6
Country: CA

NetRange: 216.75.160.0 - 216.75.191.255
CIDR: 216.75.160.0/19
NetName: GOLDEN-BLK-3
NetHandle: NET-216-75-160-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: NS.GOLDEN.NET
NameServer: NS2.GOLDEN.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2001-07-24
Updated: 2002-05-23

TechHandle: FD194-ARIN
TechName: <snipped>

Looks to me like the source NNTP server is about an hour's drive west of
Toronto. Emory is in Metro Atlanta.

--Geoff

 

[Dori Schmetterling]

Thanks for that analysis. I thought that the References also gave real info
about the source.

For my info (as I am retaining this exchange), what do you mean by "used for
threading" in this case?

Can this be forged?

DAS

 

[Dori Schmetterling]

Thank you. Much appreciated.

Now if only I could use that info and instantly sock it to all those
spammers offering me penis enlargement, breast enlargement, money transfer
arrangements, dates in my area, pics of Asian babes and home loans in the
USA...

)
DAS

 

[Dori Schmetterling]

Maybe you'd like to share some of your results when ready, they might be
very useful.

DAS