DeMoN LaG wrote:
>
> NNTP-Posting-Host: r-185.181.alltel.net
> X-NNTP-Posting-Host: 123.minneapolis-05-10rs.mn.dial-access.att.net
>
> Post from a few weeks ago:
> NNTP-Posting-Host: 157.minneapolis-01-02rs.mn.dial-access.att.net
>
> Either JTK did/did not take his medication this morning, or this was a
> very good attempt at forgery, going as far as faking an NNTP posting
> host to look like it's from the same ISP. I'd say that was really him
>
It looks like a forgery to me, why else would there be an
'X-NNTP-Posting-Host'
designed to look like JTK's NNTP-Posting-Host while the actual
NNTP-Posting-Host is completely different...
