[Dshield] Email Headers

John Hardin johnh at aproposretail.com
Fri Jun 7 20:35:51 GMT 2002

On Fri, 2002-06-07 at 07:28, ALEPH0 wrote:
> The fake ones should become apparent pretty quickly as
> you end up with a gross dicontinuity in MTA delivery times (but to account
> for GMT, various TZ issues and clocks being off by a little bit) or just a
> clear, illogical hop (or hops) between networks.

Or IP addresses with octets > 255

I always get a kick out of those.

John Hardin                                   <johnh at aproposretail.com>
Internal Systems Administrator                    voice: (425) 672-1304
Apropos Retail Management Systems, Inc.             fax: (425) 672-0192
  In the Lion
  the Mighty Lion
  the Zebra sleeps tonight...
  Dee de-ee-ee-ee-ee de de de we um umma way!
 40 days until Apropos Forum 2002

More information about the list mailing list