More on spamming..

On Wed, 1 Oct 1997, Alex Bligh wrote:

> If you keep all your servers time sync'd and keep full Radius
> accounting records, yes, you can translate an (IP address, time)
> pair into a username. Some ISPs can do this reliably. Many don't.

it's so easy. 

for dialup : 
I've got an authentication tool. Have You ever heard about Tacacs+ ? 
all informations are clear :
when, which ip (which port on which router), username, result of 
authentication   
 
for leased :
SYSLOG contains entries for sendmail. 

> Seconds may well matter. The next problem is to associate that
> user name with a person. Dead easy you may think. But the
> user may claim that someone else has been using their account.

most often company has one account and a few people had passwd to it. 
So... I can tell when it was. Then they should search inside their 
company. 

> Thus you also need to log CLI (calling number identity),
> which in turn means your telecom provider has to present it.

:( its impossible here. TPSA (telecommunication company ) is monopolist so 
they most often don't want to cooperate with people. 

even if u have an information which number was the source it's not 
everything. As i said - many companies use one PC to e-mail. 
When someone wants to check his mailbox simply call ( source phone is always 
the same ) and check it. 

MJ
___________________________________________________________________________
Miroslaw.Jaworski at ikp.com.pl (Psyborg)  MJ102-RIPE  ATM S.A. - IKP division
        WAN/UNIX adm