Google Answers Logo
View Question
 
Q: Yahoo information ( Answered 5 out of 5 stars,   0 Comments )
Question  
Subject: Yahoo information
Category: Miscellaneous
Asked by: tellme555-ga
List Price: $10.00
Posted: 26 Nov 2002 08:00 PST
Expires: 26 Dec 2002 08:00 PST
Question ID: 114876
in a yahoo header, most of the time in "recieved from" I see a number
such as: 216.136.224.(last three numbers left off) Those accounts
show: a "Helo"web.(number here).mail.yahoo....... number starting with
the number "1"

Sometimes I have seen a yahoo number in the header that show such as
66.218.93 (last two numbers left off) that account shows a "Helo"
web.(number here).mail.yahoo.com.... number starting with a "4". What
does the 66 number from yahoo mean? and the different web number
represent? a premium service?? or nothing??? these web based emails,
used to begin with the 216 numbers then changed to a 66. number

I have noticed advertizing sent to me from yahoo.com will sometimes
have a 66. number as well. I have also seen a 66. number from other
adverising companies.

Question: what does the 66 number and the web mail number starting
with "4" mean with a yahoo web based account?  and will yahoo change
your "recieved from" number after you have had a 216 number for no
reason?

Thank you.
Answer  
Subject: Re: Yahoo information
Answered By: sgtcory-ga on 26 Nov 2002 09:07 PST
Rated:5 out of 5 stars
 
Hello tellme555,

This is a very good question! I believe it best to answer all of your
questions in one section, as they all have the same answer :-) I can
tell you have a good understanding of the internet, but for sake of
thoroughness, I am explaining everything as if you needed it.


Q. What does the 66 number from yahoo mean?
-------------------------------------------------------------------------------

This number is called an I.P. address. It stands for internet
protocol, and every active website in the world has a number like this
associated with it's name. The internet works on numbers, and not the
names we commonly refer to. What you see as Yahoo.com is seen as
something like 66.218.93.xxx to other computers and networks.

Here is what Yahoo looks like sometimes, to a computer in IP format :

66.218.71.63

Here is link to a technical definiton of an 'IP address':
http://www.webopedia.com/TERM/I/IP_address.html


Here a small walkthrough of how this works :

- A user like yourself types in Yahoo.com.

- The internet sees the request and maps the request to a number.

- The number is requested at Yahoo.

- The Yahoo site responds by displaying it's webpage.


Sure there is a much more detailed explanation for this process, but I
am not here to confuse, rather to help. If you visit the link above,
you will be able to read further as to what the '66' means with
regards to the size of network that the sending server (computer)
resides in.

I did a 'name server' lookup, to show you where these numbers point
to. They do in fact, all point to a Yahoo entity:

domain name pointer UNKNOWN-216-136-224-255.yahoo.com (a 216 lookup)
domain name pointer UNKNOWN-66-218-93-255.yahoo.com (a 66 lookup)

In the future, you can check the credibilty of these numbers by using
what is called an nslookup tool. (Name Server lookup) I use this one :

nslookup at the University of Antwerp
http://cc-www.uia.ac.be/ds/nslookup.html


Q. How does this relate to the emails that I have been getting?
-------------------------------------------------------------------------------

Email systems derive from computers too! These computers are assigned
IP addresses as well. When they send out email, it is an automatic
function to include a 'header' that contains all the information that
you have outlined. The 'helo' statement you see is part of the
standard language that email systems use to communicate with each
other.

The '4' that you are referring to is simply a part of the IP address
of the originating email server. Yahoo can 'alias' different domains
(web) to allow them to use the same 'web' to deliver email, and at the
same time effectively manage the load of such a daunting task.

This number will, and should change frequently as Yahoo.com has
millions of email users. This requires them to balance all the
handling of sending and receiving emails with a network of different
computers. Everytime you get an email, it could be from a different
server, thus the different number.

Yahoo will not explicitly change the sending address for one user.
This is simply a function of the overall process. Their network is
responsible for sending millions of messages, so they utilize programs
to ensure that your message is indeed sent, even if a sending server
with an IP you normally may see is not working or was removed from the
network.

As you have already noted, they serve their advertising from different
servers. This is just probably a function of the way they choose to do
this. They can certainly use the 216.136.224. if they choose to. This
just seems to be a business choice to seperate cetain funtions within
their network. There could many other reasons, but without ever being
inside Yahoo, this is just a guess. As I noted earlier, you will see
that the first numbers have to do with the size of the network. The 66
falls under a Class A Network. You can see the different
specifications here for easy reference:

Class A - supports 16 million hosts on each of 127 networks
http://www.webopedia.com/TERM/I/IP_address.html


Most of my answer comes from first hand knowledge and working
experience. To assist with certain parts of this answer I searched
Google for:

IP address
://www.google.com/search?q=IP+address


I hope this answers your question. Should you need further
clarification, please ask before rating this answer, as I would love
to be of further assistance.

Thanks for the question tellme555!
SgtCory

Request for Answer Clarification by tellme555-ga on 26 Nov 2002 10:29 PST
Sgtcory.. Bravo! thanks for the information and the links. I have had
a few problems with porn spam, virus etc. I'm not a techie. LOL but
have tried to learn some things in order to help different abuse net
companies track these senders down. I did have a second part to this
questions but didn't want to muddy up the water with the main part. If
you choose to answer I would appreciate it, if not I understand since
it did not fall under the main question title.

When a sender uses Yahoo to email, can they (sender) too change their
(personal ISP) IP? or will yahoo capture the real IP of the sender?

Your help and links have been most helpful.

Thanks tellme555-ga

Clarification of Answer by sgtcory-ga on 26 Nov 2002 11:01 PST
Hello tellme,

I don't mind at all :-)

Q. When a sender uses Yahoo to email, can they (sender) too change
their
(personal ISP) IP? or will yahoo capture the real IP of the sender.

A seasoned hacker could indeed spoof the IP address. He would have to
go to great lengths to do this, but it can be done. Here's the
technical definition of 'IP Spoofing':

"technique used to gain unauthorized access to computers, whereby the
intruder sends messages to a computer with an IP address indicating
that the message is coming from a trusted host...."
http://www.webopedia.com/TERM/I/IP_spoofing.html

The hacker finds a valid host, (such as yours or mine) and modifies
his message headers to display different binary information and data
that would be passed to Yahoo as valid.

This is always a concern of sites like Yahoo, and I must admit, they
do stay on top of most of their security issues. If you suspect foul
play, you should contact them - I'm sure they would love to hear from
you.

Hope that clears this up for you a little!

Thanks again -
SgtCory

Request for Answer Clarification by tellme555-ga on 26 Nov 2002 13:10 PST
<<<<The hacker finds a valid host, (such as yours or mine) and
modifies
his message headers to display different binary information and data
that would be passed to Yahoo as valid.>>>>>

Can this be done on a yahoo header? I have contacted Yahoo as some of
the mail appears to be coming from Yahoo (yahoo address and header)
but seems to be a fake address and IP number. Everything else looks
exactly like a yahoo header

Clarification of Answer by sgtcory-ga on 26 Nov 2002 13:37 PST
It's definitely a possibility. Even Yahoo is not immune to many of the
advanced techniques that hackers (the bad sort) come up.

Nothing is 100% safe or certain. I hope this helps you get the bottom
of your problem!

Thanks again -

SgtCory
tellme555-ga rated this answer:5 out of 5 stars
Outstanding information and great url links
Thanks!

Comments  
There are no comments at this time.

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy