In article
l64g2000hse.googlegroups.com>,
Cardinal Lumpy says...
>
>On Jul 15, 8:46=A0am, Jose Gaspar newsguy.com> wrote:
>> In article <8739e238-7d3e-4ed9-a3a8-5c2305025...@m36g2000hse.googlegroups=
>.com>,
>> Cardinal Lumpy says...
>>
>>
>>
>>>Do Ehrett and Gilmer forge headers?
>>
>> Do bears shit in the woods? =A0
>>
>> It appears that Ceratops is NOW claiming that BILL is her husband...
>
>Bears do indeed shit in the woods. lol. So does that mean, even if
>you expand the headers of my post here, you can't really tell if it's
>me or not? Is it possible for them to forge my IP address, along with
>everything else? Actually, maybe I'm answering my own question.... if
>you expand my headers and see that my IP is
comast.net/GoogleGroups
>out of Bainbridge, or Bremerton, you'll know it's me, because if you
>expand their headers, you can see the newsreader they use? Or can they
>hide their newsreader and the whole nine yards?
They both did a very good job of forging headers but I can still know that it is
you by your IP number. Here is your header:
________________________________________
From: Cardinal Lumpy
gmail.com>
Newsgroup: alt.nuke.the.usa
Subject: Re: Gaspar or ZapRat
Date: Tue, 15 Jul 2008 09:18:03 -0700 (PDT)
Organization: http://groups.google.com
Lines: 21
Message-ID: l64g2000hse.googlegroups.com>
References: <8739e238-7d3e-4ed9-a3a8-5c2305025bb4@m36g2000hse.googlegroups.com>
drn.newsguy.com>
NNTP-Posting-Host: 76.121.92.246
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-Trace: posting.google.com 1216138684 1774 127.0.0.1 (15 Jul 2008 16:18:04 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Tue, 15 Jul 2008 16:18:04 +0000 (UTC)
Complaints-To: groups-abuse@google.com
Injection-Info: l64g2000hse.googlegroups.com; posting-host=76.121.92.246;
posting-account=xUDWrQoAAABXQtG45_8FleIwAW54_U6d
User-Agent: G2/1.0
X-HTTP-UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_4; en-us)
AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2
Safari/525.20.1,gzip(gfe),gzip(gfe)
Xref: drn.newsguy.com alt.nuke.the.usa:590175
X-Received-Date: Tue, 15 Jul 2008 12:18:04 EDT (beS2)
________________________________________________
Note that your IP address is 76.121.92.246. Now, if you use your DOS program or
Command Prompt just type in (tracert 76.121.92.246) at the command prompt.
Leave a space after 'tracert' and do not include the brackets. Then hit enter.
You will see that your IP traces to Bremerton, WA. That is how I knew it was
you. They cannot forge your IP address. Some headers do not list an IP address
or it only leads back to where the news servers are for whomever news service
they have.
For example, a recent post by John Boy shows an IP address of 75.202.174.87.
That leads to Miami and then to myvzw. That is Mobile Verizon Wireless. The
hub is in Miami but it doesn't tell where he is. It is unlikely that his
computer is hardwired to a land line.
As you suggested, you can expand their headers and see what they are using.
That doesn't always give you a lot of information but you can see what they were
using before. For example if they were consistently using MonsterNews and using
Forte XXX.XX as their reader, then you can assume who has made the post.