Subj : I have no idea To : Holger Granholm From : mark lewis Date : Fri Oct 20 2017 02:11 pm On 2017 Oct 19 09:38:00, you wrote to Paul Quinn: PQ>> Here is the ^PATH: 20/228 201/111 0 203/0 280/464 712/848 640/384 PQ>> 1384. and here is the path it took to get my system... @PATH: 20/228 201/111 0 203/0 2320/100 120/544 140/1 3634/12 PQ>> Working backwards: the last two are mine; then, my Z3C in Sydney; a PQ>> very nice feller in The Netherlands; and then, Björn in Sweden, PQ>> etc. Hope it helps. HG> No it doesn't :o( HG> In the original case a message posted in march, comes back in september! HG> That PATH is of course OK, but where has that message of mine been HG> stored six months and then released again six months later ?? it could be any one of those first four systems which narrows down the "list of suspects" ;) HG> @PATH: 20/228 201/111 0 203/0 154/10 3634/12 you can see that this one arrived here via another path and that the first four nodes are the same as above... a question to be asked is is the old message a reprocessed message (rescanned?), a regurge, or a correction of misplaced pkts/bundles... )\/(ark Always Mount a Scratch Monkey Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong... .... The difference between haste and waste are the leading letters. --- * Origin: (1:3634/12.73) .