From: Kenn Humborg (kenn at domain avalon.wombat.ie)
Date: Sun 05 Sep 1999 - 11:47:52 IST
On Sat, Sep 04, 1999 at 12:53:42PM -0500, John wrote:
> Mail is not my area , so this should be simple for ye. If a user on a
> dial-up connection connects to a smtp server using outlook. Can the
> destination server find out or trace the orginal ip address of the dial-up
> connection.
It should be shown in one of the Received: headers that show the path
the message took. The mail server at each hop should insert a
Received: header. The exact info written in the header can be
re-configured, but most places include the source IP address.
For example, the first Received: header in your message was:
Received: from sdf.lonestar.org (root at domain t3-d-static-237.adsl.directlink.net [63.68.131.237])
by lugh.tuatha.org (8.9.3/8.9.3) with SMTP id SAA17468
for <ilug at domain linux.ie>; Sat, 4 Sep 1999 18:48:46 +0100
This says that lugh.tuatha.org received the message from a
machine with address 63.68.131.237 which called itself sdf.lonestar.org.
A reverse DNS lookup on the IP address gave the name
t3-d-static-237.adsl.directlink.net and when lugh did an RFC1413
ident lookup on this machine it found that 'root' was running
the process that made the connection to lugh.
Most mail readers hide these headers unless you specifically ask for
them.
Later,
Kenn
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:04:32 GMT