From owner-freebsd-security Wed Dec 6 2:59:24 2000 From owner-freebsd-security@FreeBSD.ORG Wed Dec 6 02:59:22 2000 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from aurora.scoop.co.nz (aurora.scoop.co.nz [203.96.152.68]) by hub.freebsd.org (Postfix) with ESMTP id 98B7437B400 for ; Wed, 6 Dec 2000 02:59:20 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by aurora.scoop.co.nz (8.9.3/8.9.3) with SMTP id XAA11972; Wed, 6 Dec 2000 23:59:15 +1300 (NZDT) Date: Wed, 6 Dec 2000 23:59:14 +1300 (NZDT) From: Andrew McNaughton Reply-To: andrew@scoop.co.nz To: "Arthur W. Neilson III" Cc: freebsd-security@FreeBSD.ORG Subject: Re: your mail In-Reply-To: <200012052125590600.07C1781E@smtp> Message-ID: Priority: Normal MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Depending on the behaviour of your own mail server, you might find that if it recieves mail with 'From: tom' in the headers, it adds its local domain name to the address. That said, I seem to have a similar message which says it is from tom@aba.com. My domain is not aba.com, and this doesn't match any server the message has passed on the way. Andrew McNaughton On Tue, 5 Dec 2000, Arthur W. Neilson III wrote: > Hey guys, take a look at the headers from this posting to freebsd-security. > It apparently is from tom@pilikia.net however there is no "tom" at pilikia.net, > no one uses my system except for me. Looks like someone at 62.159.146.73 > (mail.soan.de) knows how to forge the from line, whoopie. So what's the best > way to deal with this problem? > > Thanks! -- Andrew McNaughton Scoop Media Ltd andrew@scoop.co.nz To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message