Admin Digest: Stopping Spam with Linux
Tools to Trace the Source of Spam

Rob Reilly
Monday, March 24, 2003 09:38:14 AM
Fret not! If your best efforts to block spam at the receiving end fail, Linux can still help you!
To complain back to the source of the mail you can look up the people that run the spam site with the whois command. Just use the left hand side of the address as input.
whois xxxxxxx.com
You'll get a listing of the registrant's address, city, state, phone number, etc. There is also usually a 'Technical Contact' section. Might be time to call or send an email to that contact. They may not even be aware of a spam problem.
traceroute
Figuring out the 'upstream' Internet providers to the spam site can be done by using the traceroute command. Traceroute shows all the hops needed to get to a certain Internet address. For example type:
traceroute 24.27.213.208
nslookup and dig
If traceroute and whois can't seem to find the right-hand side part of the email address, then nslookup or dig may be able to find you a good address you can use related to the mystery address. Please refer to the online documentation for more details.
Next: Wrapping Up »