Help with email

egartin asked 2 years ago

This is a class assignment. New to this kind of material and wanted to make sure my findings are correct.
Trying to investigate who sent the email and where it was sent from.
Email Header
START
------------------------------------
Received: from mumail01.marshall.edu (10.101.4.193) by muxchub02.marshall.edu
(10.101.4.233) with Microsoft SMTP Server id 8.1.240.5; Thu, 21 Feb 2008
05:10:08 -0500
Received: from barracuda.marshall.edu (barracuda.marshall.edu [10.101.4.243])
by mumail01.marshall.edu (Postfix) with ESMTP id 413EB1F096 for
; Thu, 21 Feb 2008 05:10:10 -0500 (EST)
X-ASG-Debug-ID: 1203588606-334c039c0000-HQJLbx
X-Barracuda-URL: url:removed
Received: from mailhost.auckland.ac.nz (localhost [127.0.0.1]) by
barracuda.marshall.edu (Spam Firewall) with SMTP id B6B031267D53 for
; Thu, 21 Feb 2008 05:10:06 -0500 (EST)
Received: from mailhost.auckland.ac.nz (larry.its.auckland.ac.nz
[130.216.12.34]) by barracuda.marshall.edu with SMTP id eAoTopeVpObNYfF7 for
; Thu, 21 Feb 2008 05:10:06 -0500 (EST)
Received: from localhost (localhost.localdomain [127.0.0.1]) by
mailhost.auckland.ac.nz (Postfix) with ESMTP id 5F02D186D2; Thu, 21 Feb 2008
23:09:35 +1300 (NZDT)
X-Virus-Scanned: by amavisd-new at mailhost.auckland.ac.nz
Received: from mailhost.auckland.ac.nz ([127.0.0.1]) by localhost
(larry.its.auckland.ac.nz [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id EBmCa9Vd0UZj; Thu, 21 Feb 2008 23:09:35 +1300 (NZDT)
Received: from motoko.itss.auckland.ac.nz (motoko.itss.auckland.ac.nz
[130.216.191.146]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256
bits)) (No client certificate requested) by mailhost.auckland.ac.nz (Postfix)
with ESMTP id 8E22118666; Thu, 21 Feb 2008 23:09:13 +1300 (NZDT)
Received: from motoko.itss.auckland.ac.nz (localhost.localdomain [127.0.0.1])
by motoko.itss.auckland.ac.nz (8.13.1/8.13.1) with ESMTP id m1LA82aV022044;
Thu, 21 Feb 2008 23:08:49 +1300
Received: (from [email protected]) by motoko.itss.auckland.ac.nz
(8.13.1/8.13.1/Submit) id m1LA58kr021680; Thu, 21 Feb 2008 23:05:08 +1300
X-Authentication-Warning: motoko.itss.auckland.ac.nz: apache set sender to [email][email protected][/email] using -f
Received: from 195.166.241.58 ([195.166.241.58]) by webmail.auckland.ac.nz
(Horde MIME library) with HTTP; Thu, 21 Feb 2008 23:05:06 +1300
Message-ID: <[email protected]>
Date: Thu, 21 Feb 2008 23:05:06 +1300
From: KIII
To: undisclosed-recipients:;
X-ASG-Orig-Subj:
Subject:
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.0.4)
X-Barracuda-Connect: larry.its.auckland.ac.nz[130.216.12.34]
X-Barracuda-Start-Time: 1203588607
X-Barracuda-Bayes: INNOCENT GLOBAL 0.0000 1.0000 -2.0210
X-Barracuda-Virus-Scanned: by MUNet Spam Firewall 03 at marshall.edu
X-Barracuda-Spam-Score: -1.14
X-Barracuda-Spam-Status: No, SCORE=-1.14 using per-user scores of TAG_LEVEL=3.5 QUARANTINE_LEVEL=5.0 KILL_LEVEL=9.0 tests=UNDISC_RECIPS
X-Barracuda-Spam-Report: Code version 3.1, rules version 3.1.42741
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------------------------------
0.88 UNDISC_RECIPS Valid-looking To "undisclosed-recipients"
Return-Path: [email][email protected][/email]
--------------------------------------------
END

1 Answers
Shnerdly Staff answered 2 years ago

Thanks for your question egartin.

I didn't see your conclusions in either of your posts.

From an educational standpoint, I don't think it would be fair to you if we gave you the answers your looking for.

Know the answer? Login or sign up for an account to answer this question.
Sign Up