mining email addresses? (1 Viewer)

[mojako]

I got a fake email in my Yahoo account, just say its from person1@myschool.nsw.edu.au, and ive only sent email 1 or 2 emails to 1 person, person2@myschool.nsw.edu.au. (Ive also sent and received <5 real emails from person3@subdomain.myschool.nsw.edu.au).

The question is..
How can ppl/computers associate my yahoo account with my school domain?
Does either person2's or person3's or my computer need to be infected by a virus, or can ppl find out about it from other means?

btw typing my yahoo account in google doesnt give me any hint on my school domain.

BTW, whats the email address in "message-ID", and whats the IP address and HELO natalie.org in the following?
"Received: from 64.32.182.159 (HELO natalie.org) (64.32.182.159) ..."

Thanks.

 

[sunny]

Every email you get can be faked - as long as you've used your address before (and you never know if anyone on the other end has passed on your address) then you're going to get spam.

 

[mojako]

yea.. but how do they know the owner of myemail@yahoo.com is somehow related to school.nsw.edu.au?
The other person at school.nsw.edu.au is very very much unlikely to pass on my address or email message to anyone else.

Anyway, do u know what's meant to be in "message-ID"?

 

[sunny]

yea.. but how do they know the owner of myemail@yahoo.com is somehow related to school.nsw.edu.au?
The other person at school.nsw.edu.au is very very much unlikely to pass on my address or email message to anyone else.

They might not - it could just be a lucky dictionary attack.

Anyway, do u know what's meant to be in "message-ID"?

Message-ID is the original source of the email (the machine where the sender was at). It can be faked.

HELO is a command sent by the sender (mail client) to the mail server to identify itself when when it is sending an email. It is used in the SMPT protocol.

 

[mojako]

but.. I think message-Id is in the form of an email address
so a machine is given a kind of "@" address?

 

[sunny]

but.. I think message-Id is in the form of an email address
so a machine is given a kind of "@" address?

The message-id is in a format like: uniquestring@machine/site. Different software have different ways of generating the unique string.