At 09:21 AM 4/21/97 -0500, George Blake wrote:
>Following is a mail bomb that has my return email address and sais it is
>from me but it is not. It was forged. Is there any way to trace this. I
>believe a subscriber I'm having trouble with did this.
>
>George Blake
>[log in to unmask]
>listowner - MENTAL-HEALTH-WORKER
>
>=================================
>
>
>Return-Path: <[log in to unmask]>
>Received: from mothernature.net (host-207-53-88-39.jax.bellsouth.net
>[207.53.88.39])
>        by worf.netins.net (8.8.5/8.8.5) with SMTP id IAA16063
>        for <[log in to unmask]>; Fri, 18 Apr 1997 08:13:40 -0500 (CDT)
>Date: Fri, 18 Apr 1997 08:13:40 -0500 (CDT)
>From: [log in to unmask]
>Message-Id: <[log in to unmask]>
>To: [log in to unmask]
>Subject: It's not nice to fool mother NET

This was injected at bellsouth.net 207.53.88.39.  "mothernature.net"
is nothing.

Write to [log in to unmask] -- be polite -- and possibly they can
determine who was connected there at that time.  Be sure to provide
them with all the headers.

Cheers,
Stan