Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 02 May 1997 13:08:14 -0700
From:      Scott Blachowicz <scott@bloke.statsci.com>
To:        "Jeffrey J. Mountin" <sysop@mixcom.com>
Cc:        craig@tuna.progroup.com (Craig W. Shaver), questions@FreeBSD.ORG
Subject:   Re: COME SEE THE HOTTEST scam spam on the net!!! 
Message-ID:  <m0wNOco-000QdNC@bloke.statsci.com>
In-Reply-To: Your message of "Fri, 02 May 1997 01:12:32 -0500." <3.0.32.19970502011232.00b8e16c@mixcom.com> 
References:  <3.0.32.19970502011232.00b8e16c@mixcom.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
"Jeffrey J. Mountin" <sysop@mixcom.com> wrote:

> I don't have the full thread for this, but did anyone mention that the
> headers can be forged.  Only the first 2 lines of the header can be
> trusted, as they are added by the local sendmail.

Actually, it would vary depending on who you can trust...

> Received: by mixcom.mixcom.com (8.6.12/2.2)
> 	   id PAA14271; Sun, 27 Apr 1997 15:26:51 -0500
> Received: from ns3.harborcom.net(206.158.4.7) by mixcom.mixcom.com via smap
> (V1.3)
> 	id sma014261; Sun Apr 27 20:26:41 1997
>
> (everything after this can be pure BS)

But, if (in this case) you did a 'dig -x 206.158.4.7' to verify that it
is, in fact, harborcom.net and you trust the administration of
harborcom.net to be reliable, then you could, presumably, trust the next
Received: header:

> Received: from hub.freebsd.org (hub.FreeBSD.ORG [204.216.27.18])
>           by ns3.harborcom.net (8.8.5/8.8.4) with ESMTP
> 	  id QAA10827; Sun, 27 Apr 1997 16:25:47 -0400 (EDT)

...and so forth...

Right?

Scott Blachowicz  Ph: 206/283-8802x240   Mathsoft (Data Analysis Products Div)
                                         1700 Westlake Ave N #500
scott@statsci.com                        Seattle, WA USA   98109
Scott.Blachowicz@seaslug.org



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?m0wNOco-000QdNC>