It has been pointed out to me that when someone sends mail from hotmail it may contain more information that one may see at first glance. For example the full header may look like

Received: from ([]) by with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)

id 2S0Z76MQ; Wed, 30 Jul 2003 13:48:53 +0100

Received: from (Not Verified[]) by with NetIQ MailMarshal (v5.5.3.17)

id ; Wed, 30 Jul 2003 13:58:43 +0100

Received: from ([]) by (PMDF V5.2-32 #41948)

with ESMTP id <> for

(ORCPT rfc822;; Wed, 30 Jul 2003 13:57:36 +0100 (BST)

Received: from mail pickup service by with Microsoft SMTPSVC; Wed,

30 Jul 2003 05:56:49 -0700

Received: from by with HTTP; Wed,

30 Jul 2003 12:56:49 +0000 (GMT)

Date: Wed, 30 Jul 2003 05:56:49 -0700

From: Mike Sux

Subject: your blog sucks eggs




MIME-version: 1.0

Content-type: text/plain; format=flowed

X-Originating-IP: []

X-Originating-Email: []

X-OriginalArrivalTime: 30 Jul 2003 12:56:49.0786 (UTC)


And if we examine the X-Originating-IP [] using nslookup we get




Which means my anonymous mailer is most likely somehwere in the parthusceca vpn. Now lots of companies have policies against sending malicous and insulting emails and I am sure parthusceva is no exception.

If only I knew someone there I could complain to…

Of course this also means I should apologise for accusing lots of people in error.

Leave a Reply