Re: Mysterious faked posting in CodherPlunks

Mok-Kong Shen (mok-kong.shen@stud.uni-muenchen.de)
Thu, 14 Jan 1999 17:25:45 +0100

• Next message: 'Mok-Kong Shen': "RE: Mysterious faked posting in CodherPlunks"
• Previous message: Gary Howland: "Re: New report from the BBC News web site"
• Maybe in reply to: James Petts: "New report from the BBC News web site"
• Next in thread: Adam Back: "Re: Mysterious faked posting in CodherPlunks"
• Reply: Adam Back: "Re: Mysterious faked posting in CodherPlunks"

Mok-Kong Shen wrote:
>
> Sorry for the disturbance. But I just received the following
> with the mysterious 'Is L.D: back?' and my name as sender (with
> quotes though) and an attached file which I can't read.

I have just made a comparison of the faked message with my above
message by saving these to files and examine the header part.
I found the following which is present in the first but not
in the second:

X400-Received: by /PRMD=nexor/ADMD=ATTMAIL/C=GB/; Relayed;
               Thu, 14 Jan 1999 09:29:57 +0000
X400-Received: by mta lancaster.nexor.co.uk in
/PRMD=nexor/ADMD=ATTMAIL/C=GB/;
               Relayed; Thu, 14 Jan 1999 09:29:57 +0000
Date: Thu, 14 Jan 1999 09:29:57 +0000
X400-Originator: Andy.Brown@nexor.co.uk

I suspect that this could possibly be an indication of the source of
the faked mail, though my knowledge of the mailing system is
too poor to known whether this indeed the case.

M. K. Shen

• Next message: 'Mok-Kong Shen': "RE: Mysterious faked posting in CodherPlunks"
• Previous message: Gary Howland: "Re: New report from the BBC News web site"
• Maybe in reply to: James Petts: "New report from the BBC News web site"
• Next in thread: Adam Back: "Re: Mysterious faked posting in CodherPlunks"
• Reply: Adam Back: "Re: Mysterious faked posting in CodherPlunks"