well, thats more or less what I thought. However, I was able to ping that address and traceroute it back at the time I sent the e-mail. so it was active, if only for a few hours. in fact, as I type this, I am able to pingthat address... I know most of the tricks for spoofing headers, but spoofing a path on the e-mail is a whole different critter. I did send a query to sprintbbd about it. won't know until tomorrow (monday) what the results are. Hawke On Sat, 14 April 2001, "Brian Cluff" wrote: > > More than likely, it's a spoofed address. That address is indeed assigned > in the same chunk of IP's, but there is currently no machine on that IP at > all, and never has been. There are only 2 machines on that chunk of > bandwidth and both of them are completely intact and running smooth as ever. > > Whatever it was that you got, it didn't actually come from us. > > Brian > Signup for your free USWEST.mail Email account http://www.uswestmail.net