[PCR-1000] Trace and whois
P F
[email protected]
Thu, 13 Mar 2003 07:19:27 +0100
Actually... if you just go to the adress http://whois.arin.net
http://whois.iana.org/
http://whois.ripe.net
you can do a "database" search... and the -h option works there too.
> > How about teaching the rest of us how to dig up this info from the
user's
> > email properties. It's easy to view the entire email including headers,
but
> > we all probably need some education in the tools used to get to the
> > 'bottom'.
> >
> > I'm quite tired of those that have besieged me with SPAM, Porn, and
> > generally annoying emails....
>
> My day job is as antispam-and-antivirus guy for a large state govt.
> agency. I know more than I want to about this.
>
> The "whois" command is your friend. If you're running Windows and
> don't have the "whois" command, then you ought to consider installing
> the "Cygwin" package, which is freeware that gives you a lot of
> native-Unix commands, including "whois".
>
> Determine the machine that handed off the mail to your machine if
> you run your own SMTP server, or to your ISP's mailserver otherwse.
>
> Use "whois -h whois.arin.net <address>" to determine who really
> owns the address of that machine, and address your mail to
> "<owning-domain-name>@abuse.net".