On Sun, 16 May 2004, Robin 'Roblimo' Miller wrote:
> >This is a case where what _looks_ real isn't. Most of the addresses here
> >are spoofed. Although the "To:" header says one thing, the envelope
> >header is something else, which is why it got to you, but not to the
> >list in general.
>
> I get complaints all the time about spam "from" NewsForge, Slashdot,
> SourceForge, freshmeat, and other OSDN sites that, if you look at the
> headers, really came through open relays in places like Nigeria, Korea,
> China or one of the former Soviet Republics.
OK, given the headers I posted, how do I tell where it _really_ came from,
without a manual method such as whois? Or is that the most (only)
reliable way?
I assume it's among the "Received:" headers somewhere, and that some of
them are forged. How do I tell the difference between real and fake?
-- -eben ebQenW1@EtaRmpTabYayU.rIr.OcoPm home.tampabay.rr.com/hactarAn idea that is not dangerous is unworthy of being called an idea at all. -Oscar Wilde
----------------------------------------------------------------------- This list is provided as an unmoderated internet service by Networked Knowledge Systems (NKS). Views and opinions expressed in messages posted are those of the author and do not necessarily reflect the official policy or position of NKS or any of its employees.
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:30:05 EDT