From owner-freebsd-hackers Sun Sep 7 20:04:52 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id UAA29469 for hackers-outgoing; Sun, 7 Sep 1997 20:04:52 -0700 (PDT) Received: from hydrogen.nike.efn.org (resnet.uoregon.edu [128.223.170.28]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id UAA29463 for ; Sun, 7 Sep 1997 20:04:48 -0700 (PDT) Received: (from jmg@localhost) by hydrogen.nike.efn.org (8.8.7/8.8.7) id UAA17901; Sun, 7 Sep 1997 20:04:46 -0700 (PDT) Message-ID: <19970907200445.27869@hydrogen.nike.efn.org> Date: Sun, 7 Sep 1997 20:04:45 -0700 From: John-Mark Gurney To: hackers@hub.freebsd.org Subject: Re: spam and the FreeBSD mailing lists References: <19970907181727.43084@hydrogen.nike.efn.org> <199709080251.TAA16323@usr07.primenet.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.69 In-Reply-To: <199709080251.TAA16323@usr07.primenet.com>; from Terry Lambert on Mon, Sep 08, 1997 at 02:51:22AM +0000 Reply-To: John-Mark Gurney Organization: Cu Networking X-Operating-System: FreeBSD 2.2.1-RELEASE i386 X-PGP-Fingerprint: B7 EC EF F8 AE ED A7 31 96 7A 22 B3 D8 56 36 F4 X-Files: The truth is out there X-URL: http://resnet.uoregon.edu/~gurney_j/ Sender: owner-freebsd-hackers@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk Terry Lambert scribbled this message on Sep 8: > > personally... I think that it isn't bad any more... considering how easy > > it is to fix, (I posted the fix a couple days ago) I'm actually heading > > twards the end that forces it to resolve... :) > > This neglects the case of a machine acting as the domain for which it > is a member in order to send mail. oh, your talking about if the machine is somehost.domain.com, and that it users recieve their mail at username@domain.com?? well. then it's your job as an admin to fix those machines to properly identify itself... > It also neglects the point of browsers on PCs that you yourself raised > earlier: Eudora, IEx.x, and NetScape all can send mail without a valid > return address. As can "cyberbomber", etc.. Consider someone like > that, who nevertheless subscribes to the list with a valid return address. umm... can you refer to me the message that I brought about about how browsers can send fine? (mesg-id will do nicely, I archive all out going mail)... yes.. but that's because those programs do the masquerading for you.. I believe they take your from address and just present it in the "mail from:" part... nothing says that the return-path has to include the local machine... by default sendmail doesn't masquerade or read your mail to grab the reply-to to preset a valid mail from:... it just assumes that the machine addressing the envelope knows what it's doing.. and if you tell sendmail to rewrite addresses.. it will happily whiteout your invalid info.. and replace it with valid info (that you tell it).. -- John-Mark Gurney Modem/FAX: +1 541 683 6954 Cu Networking Live in Peace, destroy Micro$oft, support free software, run FreeBSD