Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Posting-Version: version B 2.10.3 Tandy Xenix 02/17/86; site gilbbs.UUCP
Path: utzoo!watmath!clyde!burl!ulysses!gamma!epsilon!zeta!sabre!petrus!bellcore!decvax!tektronix!hplabs!qantel!lll-lcc!dual!ptsfa!gilbbs!root
From: root@gilbbs.UUCP (The Super User)
Newsgroups: net.news.sa
Subject: phoney addresses, can they be tracked?
Message-ID: <134@gilbbs.UUCP>
Date: Sun, 30-Mar-86 20:43:15 EST
Article-I.D.: gilbbs.134
Posted: Sun Mar 30 20:43:15 1986
Date-Received: Wed, 2-Apr-86 01:29:04 EST
Organization: Gil's Place, Santa Rosa CA
Lines: 36
Keywords: forgery, phoney addresses, protection


   I recently received a mail message which has an obviously phoney address
as the return path.  I am concerned about this mis-use of the network.  Is
there any way that we might be able to track such a posting?

   The offensive posting header follows:


Received: by hplabs.ARPA ; Thu, 27 Mar 86 00:03:55 pst
Received: by hao.NCAR (4.12/4.7)
	id AA08482; Thu, 27 Mar 86 00:26:14 mst
Received: by seismo.ARPA (4.12/4.7)
	id AA03491; Thu, 27 Mar 86 13:45:53 est
Received: by mcvax.UUCP (4.12/4.7)
	id AA09712; Thu, 27 Mar 86 10:48:31 gmt
Received: by moskvax.USSR (4.12/4.7)
	id AA08123; Wed, 26 Mar 86 23:19:33 ust
Received: by kremlin.USSR (4.12/4.7)
	id AA03099; Wed, 26 Mar 86 23:15:03 ust
Date: Thu, 27 Mar 86 00:06:02 mst
Message-Id: <8603270706.AA08411@kremlin.USSR>
From: hplabs!hao!kremlin!andropov (Yuri's Ghost)
Subject: Re: looking for CSUC *TALK* users
Apparently-To: moskvax!mcvax!seismo!hao!hplabs!qantel!gilbbs!mc68020
Status: R

  [body of message removed]


   Can anyone assist me in determining the origin of this letter?

   Thanks in advance.


Sincerely,
Yuri