[Novalug] Forged email header
William Sutton
william at trilug.org
Tue Jan 6 13:37:07 EST 2009
pine/alpine/mutt/SMTP for the win. No pictures or links to click on.
general rules of thumb:
1. If it comes from a m/\.[a-z]{2}/i domain, use extreme caustion
2. If it comes from someone you don't know, use extreme caution
3. If it doesn't apply to any discussions you're actively in...
4. If it didn't come from a mailing list you're subscribed to, or a person
you know and trust...
5. If it doesn't concern your immediate (G/PG rated) interests (see
example below, eh?)...
basically, common sense applies.
William Sutton
On Tue, 6 Jan 2009, JRR wrote:
> John Ross wrote;
>
> I have received Emails in the past (recently) with both the subject and
> sender totally blank.
> I never opened any of them. Fortunately they messed up the dates and
> they were
> all time stamped 12-31-1969 at 24:00:00 so it was easy to filter them.
>
> I have also had tremendous problems with "Christmas Island" country
> code .CX
> They're just off the coast of Australia, part of the "Kingdom of
> Iribundi" and the
> Australians would like to wring their necks... They are Pirates going
> back 200 years
> and now they have adopted the Internet as their main method. They
> drained 4.x MB
> out of my desktop before I cut them off. That was two years ago.
> Several unsuccessful
> attempts were made on my Internet Identities. I was forwarded to one of
> their sites by
> clicking on a picture.
>
>
> Jay Hart wrote:
>> I assume it is possible to forge an email header. What is the probability
>> that this was forged? I've copied the entire header below:
>>
>> Jay
>>
>> Return-Path: <jhart at kevla.org>
>> X-Original-To: jhart at kevla.org
>> Delivered-To: jhart at kevla.org
>> Received: from localhost (localhost [127.0.0.1])
>> by email.kevla.org (Postfix) with ESMTP id 85B2A56460
>> for <jhart at kevla.org>; Tue, 6 Jan 2009 11:10:29 -0500 (EST)
>> X-Virus-Scanned: amavisd-new at kevla.org
>> X-Spam-Score: 3.123
>> X-Spam-Level: ***
>> X-Spam-Status: No, score=3.123 tagged_above=-100 required=3.14
>> tests=[AWL=-7.523, BAYES_20=-0.74, HTML_IMAGE_ONLY_20=1.157,
>> HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.881, MIME_HTML_ONLY=0.001,
>> MSGID_FROM_MTA_ID=1.393, NO_REAL_NAME=0.961, RCVD_IN_SORBS_WEB=1.456,
>> RCVD_IN_XBL=3.897, URIBL_SBL=1.639]
>> Received: from email.kevla.org ([127.0.0.1])
>> by localhost (email.kevla.org [127.0.0.1]) (amavisd-new, port 10024)
>> with ESMTP id 3+PVWtgj+yTU for <jhart at kevla.org>;
>> Tue, 6 Jan 2009 11:10:21 -0500 (EST)
>> Received: from [41.250.240.76] (unknown [41.250.240.76])
>> by email.kevla.org (Postfix) with ESMTP id BF487563B1
>> for <jhart at kevla.org>; Tue, 6 Jan 2009 11:10:20 -0500 (EST)
>> To: <jhart at kevla.org>
>> Subject: Jessica Alba giving good head
>> From: <jhart at kevla.org>
>> MIME-Version: 1.0
>> Importance: High
>> Content-Type: text/html
>> Message-Id: <20090106161020.BF487563B1 at email.kevla.org>
>> Date: Tue, 6 Jan 2009 11:10:20 -0500 (EST)
>>
>>
>> _______________________________________________
>> Novalug mailing list
>> Novalug at calypso.tux.org
>> http://calypso.tux.org/cgi-bin/mailman/listinfo/novalug
>>
>>
>>
>
> _______________________________________________
> Novalug mailing list
> Novalug at calypso.tux.org
> http://calypso.tux.org/cgi-bin/mailman/listinfo/novalug
>
>
More information about the Novalug
mailing list