Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Mar 2001 08:08:04 -0500 (EST)
From:      "Bruce M. Walker" <bmw@borderware.com>
To:        Jim Durham <durham@w2xo.pgh.pa.us>
Cc:        freebsd-security@freebsd.org
Subject:   Re: Sophos and Virus return mail
Message-ID:  <200103141308.f2ED84E11909@fusion.borderware.com>
In-Reply-To: <Pine.BSF.4.21.0103132338550.27904-100000@shazam.int> from Jim Durham at "Mar 13, 2001 11:54:01 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
Jim Durham wrote:
> 
> I thought of rewriting the script to use the "From: " address
> to reply. I think that would usually work, but I'm not sure
> that address always appears either.

Unhappily not:

  From: Hahaha <hahaha@sexyfun.net>

You can see the IP of the host that sent it to you in the Received:
headers if you inspect them, but that will be simply the Windows
PC that itself has been infected.  Snowhite contains a complete
SMTP send-only implementation and it delivers to its targets directly.

I'm afraid you're stuck with these things.

(This is one case where blocking of port 25 by ISPs is a good thing.)

-bmw

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200103141308.f2ED84E11909>