13 Jan
2004
13 Jan
'04
12:50 p.m.
On Tue, Jan 13, 2004 at 12:00:37PM +0000, Tarquin Mills wrote:
In message 20040113111037.GT16507@thebowery.co.uk adam@thebowery.co.uk wrote:
Notice the line X-Trace: newsfep2-gui.server.ntli.net 1073580342 81.100.208.121 (Thu, 08 Jan 2004 16:45:42 GMT) This gives a clue to where the article was originally posted from (the ip address 81.100.208.121).
Why not use the NNTP Posting field?
Because that field could be faked, the X-Trace is more likely to have been added by a system under the control of NTL (although wether I trust them to get it right I don't know ;)) but again it could be faked, just I trust the X-Trace line more.
Adam
--
jabberid = quinophex@jabber.earth.li
AFFS || http://www.affs.org.uk/ || Not a filesystem