Xref: utzoo soc.culture.jewish:8488 news.sysadmin:1755 comp.mail.misc:1420
Path: utzoo!utgpu!watmath!clyde!att!pacbell!ames!mailrus!eecae!cps3xx!rang
From: rang@cpsin3.cps.msu.edu (Anton Rang)
Newsgroups: soc.culture.jewish,news.sysadmin,comp.mail.misc
Subject: Re: bigoted racist misuse of email
Summary: Yes, you can trace the sender via the message ID (probably)
Message-ID: <1212@cps3xx.UUCP>
Date: 1 Dec 88 05:38:34 GMT
References: <10704@ihlpa.ATT.COM>
Sender: usenet@cps3xx.UUCP
Reply-To: rang@cpswh.cps.msu.edu (Anton Rang)
Organization: Michigan State University, Computer Science Dept.
Lines: 17
In-reply-to: davidm@ihlpa.ATT.COM's message of 1 Dec 88 01:52:34 GMT

In article <10704@ihlpa.ATT.COM>, David Makowsky (davidm@ihlpa.ATT.COM) writes:
>Does anyone know if the message id can be used to trace the origins
>of the email?  [ The ID was <8811302150.AA03838@osupyr.mast.ohio-state.edu>. ]

  If osupyr is logging outgoing mail, the message ID will appear in
the syslog file, along with (I think) the user ID.  Otherwise, the
beginning of the message ID shows that it was sent at 21:50 (osupyr
time) on November 30.  The basic UNIX accounting data should be enough
to track the account name, or at least narrow it down to two or three
(how many people send mail at once?).

	Anton Rang (rang@cpswh.cps.msu.edu)

+---------------------------+------------------------+----------------------+
| Anton Rang (grad student) | "VMS Forever!"         | "Do worry...be SAD!" |
| Michigan State University | rang@cpswh.cps.msu.edu |                      |
+---------------------------+------------------------+----------------------+