As a site admin, I get occasional complaints about spam from our site.
Unfortunately (or fortunately, depending on how you look at it), the
headers are usually forged to make it look as though it came from us by
using an IP address in our network. So you can't always rely on the
information you find in the headers and with spam you can almost never
rely on it. A great free tool for analyzing headers and identifying those
that are likely forged is SamSpade. It's a Windows program and all you do
is paste the offending email message into it and the program gives you
lots of useful info, including whois and dns lookups. You can get more
info and download the program at www.samspade.org.

lisa


On 05/21/2003 06:26:21 AM Margaret King <[log in to unmask]> wrote:

>When I get an IP address I like to plug it into the box near the top
>of the www.arin.net page.  That may pull up information about an ISP.
>Or, if the ISP is out of their area (in Korea for example) then they
>may direct you to another (closer) "whois" service where you can try
>again (and again...).
>
>Margaret King
>Michigan State University