Before being shot by anyone, Jo the prevoious owner, advised me about who are ISC.ORG, Paul Vixie et al ... Which only leaves isgate ( a news -> mail gateway) in Europe ... So it does look like a standard "moron" attack rather than a troll one :-) Anyhow I still would appreciate suggestions / ideas on methods to differentiate ... Eric. BLUES-L co-owner. ----- Original Message ----- From: Eric Paul-Hus, SPG Int'l <[log in to unmask]> To: LSTOWN-L PEACH.EASE.LSOFT.COM (1.8d) <[log in to unmask]> Sent: 16 juin, 1999 12:32 Subject: Possible Troll Attack, please help me read the headers [...] > As a precaution I advised Bill (the active owner) to notify [log in to unmask] > and to do the same with ISC.ORG ... Is the normal procedure CC'ing the > technical contact from the Whois database ? [...]> ----------- Trolling post in question ------------- > > >------------------------ Original message (29 > > >lines) -------------------------- > > >Return-Path: <[log in to unmask]> > > >Received: from BROWNVM (NJE origin SMTP@BROWNVM) by BROWNVM.BROWN.EDU > (LMail > > >V1.2a/1.8a) with BSMTP id 6043; Wed, 16 Jun 1999 09:58:14 -0400 > > >Received: from nut.brown.edu (128.148.19.196) by BROWNVM.brown.edu > > > (IBM VM SMTP V2R4) with TCP; Wed, 16 Jun 99 09:58:12 EDT > > >Received: from isgate.is (isgate.is [193.4.58.51]) > > > by nut.brown.edu (8.9.1a/8.9.1) with ESMTP id JAA09949 > > > for <[log in to unmask]>; Wed, 16 Jun 1999 09:57:42 -0400 > > >(EDT) > > >Received: from ngeout01.news.aol.com (ngeout01.news.aol.com > > >[152.163.176.244]) > > > by isgate.is (8.9.3r/8.9.0Imo) with SMTP id NAA22539 > > > for <[log in to unmask]>; Wed, 16 Jun 1999 > > >13:57:40 GMT > > >Received: from ladder05.news-fddi.aol.com (ladder05.news-fddi.aol.com > > >[172.16.31.190]) by ngeout01.news.aol.com (8.6.12/8.6.12) with ESMTP id > > >JAA11195 for <[log in to unmask]>; Wed, 16 Jun 1999 > > >09:57:23 -0400 > > >To: <[log in to unmask]> > > >From: [log in to unmask] (I Can Post) > > >Newsgroups: bit.listserv.blues-l > > >Date: 16 Jun 1999 13:57:23 GMT > > >Organization: AOL http://www.aol.com > > >Subject: I heard you can post anything here! > > >Message-ID: <[log in to unmask]> [... text snipped] >