[52236] in Hotline Meeting
Need login data on w20-575-121.mit.edu
daemon@ATHENA.MIT.EDU (Tim McGovern)
Tue Oct 3 14:59:05 2000
Message-Id: <39DA2C71.441CF42@mit.edu>
Date: Tue, 03 Oct 2000 14:58:59 -0400
From: Tim McGovern <tjm@MIT.EDU>
Reply-To: MIT Stopit <stopit@MIT.EDU>
Mime-Version: 1.0
To: hotline@MIT.EDU, hardserv@MIT.EDU
Cc: MIT Stopit <stopit@MIT.EDU>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
*** This is a bit of correction to the previous message to include more headers ***
*** My apologies for being stingy the last time ***
We're working on a case which involves posting messages via a Yahoo e-mail
account, using MIT machines -- one public cluster machine, and several MechE
private machines, among others. The Athena machine was used to post a message
with these headers:
Received: from fort-point-station.mit.edu by po12.mit.edu (8.9.2/4.7) id
NAA25334; Sun, 16 Jul
2000 13:49:12 -0400 (EDT)
Received: from web6101.mail.yahoo.com (web6101.mail.yahoo.com [128.11.22.95])
by fort-point-station.mit.edu (8.9.2/8.9.2) with SMTP id NAA08588
for <msa-sis@mit.edu>; Sun, 16 Jul 2000 13:48:59 -0400 (EDT)
Message-ID: <20000716174910.9645.qmail@web6101.mail.yahoo.com>
Received: from [18.187.0.142] by web6101.mail.yahoo.com; Sun, 16 Jul 2000
10:49:10 PDT
Date: Sun, 16 Jul 2000 10:49:10 -0700 (PDT)
18.187.0.142 translates to be w20-575-121.mit.edu.
The date of 16 Jul 2000 is accurate according to the complainant in the case.
While the posting bears a PDT timestamp, that's because of the Yahoo e-mail system...
It's very likely this was posted at approx. 13:48 EDT from the w20 machine.
What do we have by way of logs about who may have been logged into that machine
at that day & time?
Thanks,
Tim McGovern for MIT Stopit
