Xref: utzoo soc.culture.jewish:8488 news.sysadmin:1755 comp.mail.misc:1420 Path: utzoo!utgpu!watmath!clyde!att!pacbell!ames!mailrus!eecae!cps3xx!rang From: rang@cpsin3.cps.msu.edu (Anton Rang) Newsgroups: soc.culture.jewish,news.sysadmin,comp.mail.misc Subject: Re: bigoted racist misuse of email Summary: Yes, you can trace the sender via the message ID (probably) Message-ID: <1212@cps3xx.UUCP> Date: 1 Dec 88 05:38:34 GMT References: <10704@ihlpa.ATT.COM> Sender: usenet@cps3xx.UUCP Reply-To: rang@cpswh.cps.msu.edu (Anton Rang) Organization: Michigan State University, Computer Science Dept. Lines: 17 In-reply-to: davidm@ihlpa.ATT.COM's message of 1 Dec 88 01:52:34 GMT In article <10704@ihlpa.ATT.COM>, David Makowsky (davidm@ihlpa.ATT.COM) writes: >Does anyone know if the message id can be used to trace the origins >of the email? [ The ID was <8811302150.AA03838@osupyr.mast.ohio-state.edu>. ] If osupyr is logging outgoing mail, the message ID will appear in the syslog file, along with (I think) the user ID. Otherwise, the beginning of the message ID shows that it was sent at 21:50 (osupyr time) on November 30. The basic UNIX accounting data should be enough to track the account name, or at least narrow it down to two or three (how many people send mail at once?). Anton Rang (rang@cpswh.cps.msu.edu) +---------------------------+------------------------+----------------------+ | Anton Rang (grad student) | "VMS Forever!" | "Do worry...be SAD!" | | Michigan State University | rang@cpswh.cps.msu.edu | | +---------------------------+------------------------+----------------------+