This is pretty easy, but there are some caveats (warnings)
! ! ! W A R N I N G ! DANGER WILL ROBINSON! W A R N I N G ! ! !
Using this method, your userid and password are transmitted unsecured! in the open. For anyone to see. DO NOT ATTEMPT THIS ON A PUBLIC NETWORK. BAD IDEA!!
Why I do this? Sometimes someone sends a very large message to my parents, and they are not on a super fast connection. And they don’t want to spend 20 minutes downloading this, to find out it’s a joke from someone. Easy way to identify who sent the message, and delete the message, without having to spend the time to download it.
Port 110 is the POP (Post Office Protocol) port.
1. So let’s connect to the pop server:
telnet yourisps.mailserver 110
Trying 86.2.12.45…
Connected to yourisps.mailserver
Escape character is ‘^]’.
+OK abdefg InterMail POP3 server ready.
2. And type in the word “user” followed by your userid. I can not emphasize enough. Your userid and password are transmitted unsecured. ONLY DO THIS FROM HOME, NOT A PUBLIC NETWORK!
user youruserid
+OK please send PASS command
pass yourpassword
+OK youruserid is welcome here
3. Okay were logged on, let’s see what we got:
Please note: This is ALL fictitious (fake) information.
list
+OK 2 messages
1 20048503
2 9585
.
4. Okay we have two messages, let’s look at the first one.
The format for the top command is: top message# #linestodisplay
In this case I want to look at message number 1, and only the first line. This will give me the identification of who sent the message.
top 1 1
Sample output:
+OK
Received: from doughboy.dohnut.com ([241.13.148.32])
by eastrmimpi03.cox.net with IMP
id Qlpf1h00v0syt8Y01lpgZb; Thu, 25 Aug 2011 17:49:45 -0400
X-CT-Score: NA
X-Authority-Analysis: v=1.1 cv=IuAmMtz0fBBeZiIhdxTxU86IG4HjPW3u5r/qc1hhkRo=
c=1 sm=1 a=3eZ7Q9b2IqIA:10 a=rkfKbSMykxIA:10 a=MRZ0FHSSkhOHWfuVvhvwPg==:17
a=K3e1NQirAAAA:8 a=kTxl9t5-ZLAzewleIv8A:9 a=QEXdDO2ut3YA:10 a=yMhMjlubAAAA:8
a=SSmOFEACAAAA:8 a=CjxXgO3LAAAA:8 a=rWpkTK4KLj79uxU1I9oA:9
a=mdl0ZD2nbXoXlwIOBxcA:7 a=gKO2Hq4RSVkA:10 a=hTZeC7Yk6K0A:10
a=PIhB4iMt3BeqywaJV8IA:9 a=KQqxNPgzF0kA:10 a=-TsIfCouYY1OzVOR:18
a=2zCILR_UXJjhw6Bkj5wA:9 a=GgDoAz7O_zbXHfmf:18 a=TqMuSDJolXCvaU-DJ8gA:9
a=XsCmn76AzMD1AyMi:18 a=cbLqbakRlVZmJxlxcyMA:9 a=ViQt9kA691hNrGmx:21
a=BM–FZgVJJwMtIjX:21 a=DmoNDgEfHTn6PCMi:18 a=MRZ0FHSSkhOHWfuVvhvwPg==:117
X-CM-Score: 0.00
Received: from doughboy.dohnut.com (localhost [127.0.0.1])
by doughboy.dohnut.com (Postfix) with ESMTP id 895A140B7BF
for
Delivered-To: youruserid
X-Pobox-Orig-Sender:
12741D6E-CF64-11E0-BF51-DB7D98E6108A-87405395!doughboy.dohnut.com
x-pobox-client-address: 241.13.148.42
x-pobox-client-name: doughboy.dohnut.com
Received: from doughboy.dohnut.com (doughboy.dohnut.com
[241.13.148.42]) by doughboy.dohnut.com (Postfix) with ESMTP id 184CF40B7C1 for
X-Authority-Analysis: v=1.1 cv=SOlsIBN44tkg4MqIq+y2aLZdhoA3kHpmiRsLue6rfnM=
c=1 sm=0 a=rkfKbSMykxIA:10 a=8m3kUcaNEbPth8vwNQ8PxA==:17 a=K3e1NQirAAAA:8
a=kTxl9t5-ZLAzewleIv8A:9 a=QEXdDO2ut3YA:10 a=yMhMjlubAAAA:8 a=SSmOFEACAAAA:8
a=CjxXgO3LAAAA:8 a=rWpkTK4KLj79uxU1I9oA:9 a=mdl0ZD2nbXoXlwIOBxcA:7
a=gKO2Hq4RSVkA:10 a=hTZeC7Yk6K0A:10 a=PIhB4iMt3BeqywaJV8IA:9
a=KQqxNPgzF0kA:10 a=-TsIfCouYY1OzVOR:18 a=2zCILR_UXJjhw6Bkj5wA:9
a=GgDoAz7O_zbXHfmf:18 a=TqMuSDJolXCvaU-DJ8gA:9 a=XsCmn76AzMD1AyMi:18
a=8FVIF5GNE0wYr8ZW84gA:9 a=zdyBz9CGz3EGURmb:21 a=RR_I2oJlBLEOdRJK:21
a=DmoNDgEfHTn6PCMi:18 a=8m3kUcaNEbPth8vwNQ8PxA==:117
X-Cloudmark-Score: 0
X-Originating-IP: 241.13.148.42
Received: from [241.13.148.42] ([241.13.148.42:49183] helo=poppinfresh) by
cdptpa-oedge01.mail.dohnut.com (envelope-from
2.2.3.46 r()) with ESMTP id E6/80-15242-C13C65E4; Thu, 25 Aug 2011 21:48:48
+0000
From: “poppinfresh”
Date: Thu, 25 Aug 2011 16:47:03 -0500
Message-ID: <004c01cc6370$8860e440$9922acc0$@rr.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_004D_01CC6346.9F8ADC40″
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AcxjZxAcX4lsVQV6T1OHvfeElRfFQQACM3hw
Content-Language: en-us
X-Pobox-Pass: poppinfresh@dohnut.com is whitelisted
This is a multi-part message in MIME format.
.
5. And we want to delete the offending message
ONCE YOU DELETE THIS MAIL, THERE IS NO GOING BACK. IT IS GONE FOREVER.
dele 1
+OK
6. And logoff
quit
+OK youruserid InterMail POP3 server signing off.
Connection closed by foreign host.
dohboy@willy:~$
Related Articles
No user responded in this post