Is this personal or just a creative way of sending spam? It could have been anybody hitting the "send this article to a friend" button. Nevertheless, you might be able to find the guys ip, if he really angers you. Maybe his boss is on the list too :) Cheers Peter and Karin ======================================= Received: from tribuneinteractive.com (s89.tribuneinteractive.com [12.130.90.37]) by fiji.merit.edu (Postfix) with ESMTP id 856EA18B4 for <nanog@merit.edu>; Fri, 16 Dec 2005 02:26:54 -0500 (EST) Received: from s79 (s79.rc.trb [192.168.120.78]) by tribuneinteractive.com (8.12.10/8.12.8) with ESMTP id jBG7Qs6E017130 for <nanog@merit.edu>; Thu, 15 Dec 2005 23:26:54 -0800 (PST) Message-ID: <17556548.1134718014005.JavaMail.turbine@s79> Received: from tribuneinteractive.com (s89.tribuneinteractive.com [12.130.90.37]) by fiji.merit.edu (Postfix) with ESMTP id 93DD617D6 for <nanog@merit.edu>; Fri, 16 Dec 2005 02:24:28 -0500 (EST) Received: from s79 (s79.rc.trb [192.168.120.78]) by tribuneinteractive.com (8.12.10/8.12.8) with ESMTP id jBG7OR6E017004 for <nanog@merit.edu>; Thu, 15 Dec 2005 23:24:27 -0800 (PST) Message-ID: <32577964.1134717867400.JavaMail.turbine@s79> Received: from tribuneinteractive.com (s89.tribuneinteractive.com [12.130.90.37]) by fiji.merit.edu (Postfix) with ESMTP id E4F3A17D6 for <nanog@merit.edu>; Fri, 16 Dec 2005 02:26:32 -0500 (EST) Received: from s79 (s79.rc.trb [192.168.120.78]) by tribuneinteractive.com (8.12.10/8.12.8) with ESMTP id jBG7QW6E017114 for <nanog@merit.edu>; Thu, 15 Dec 2005 23:26:32 -0800 (PST) Message-ID: <15230846.1134717992333.JavaMail.turbine@s79> The admin of ; <<>> DiG 9.1.3 <<>> -t any s89.tribuneinteractive.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22482 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4 ;; QUESTION SECTION: ;s89.tribuneinteractive.com. IN ANY ;; ANSWER SECTION: s89.tribuneinteractive.com. 300 IN A 12.130.90.37 ;; AUTHORITY SECTION: tribuneinteractive.com. 300 IN NS chisun2.tribune.com. tribuneinteractive.com. 300 IN NS latsun6.tribune.com. tribuneinteractive.com. 300 IN NS ns-east.cerf.net. tribuneinteractive.com. 300 IN NS ns-west.cerf.net. ;; ADDITIONAL SECTION: chisun2.tribune.com. 170593 IN A 163.192.1.10 latsun6.tribune.com. 170593 IN A 144.142.2.6 ns-east.cerf.net. 170593 IN A 207.252.96.3 ns-west.cerf.net. 170593 IN A 192.153.156.3 ;; Query time: 513 msec ;; SERVER: 192.168.48.228#53(192.168.48.228) ;; WHEN: Fri Dec 16 17:01:41 2005 ;; MSG SIZE rcvd: 228 and of ; <<>> DiG 9.1.3 <<>> -t any s79.tribuneinteractive.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11428 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;s79.tribuneinteractive.com. IN ANY ;; AUTHORITY SECTION: tribuneinteractive.com. 300 IN SOA chisun2.tribune.com. \ tis-dnsadmin@tribune.com. 2005111701 3600 900 604800 86400 ;; Query time: 233 msec ;; SERVER: 192.168.48.228#53(192.168.48.228) ;; WHEN: Fri Dec 16 17:04:42 2005 ;; MSG SIZE rcvd: 109 Could probably help -- Peter and Karin Dambier The Public-Root Consortium Graeffstrasse 14 D-64646 Heppenheim +49(6252)671-788 (Telekom) +49(179)108-3978 (O2 Genion) +49(6252)750-308 (VoIP: sipgate.de) mail: peter@peter-dambier.de mail: peter@echnaton.serveftp.com http://iason.site.voila.fr/ https://sourceforge.net/projects/iason/