[Novalug] [Ma-linux] Forged email header

[Jay Hart]

Yeah, now I jsut need to figure out how to forge the IP address so it looks
like it came from me.

Jay

> Agreed!
>
> Maybe a podcast topic :P
> on how Jay sends spam to himself oddly :P
>
> from a mail server on his own pc none the less
>
> Clever Jay clever!
>
> On Tue, Jan 6, 2009 at 1:37 PM, William Sutton <william at trilug.org> wrote:
>
>> pine/alpine/mutt/SMTP for the win.  No pictures or links to click on.
>> general rules of thumb:
>> 1. If it comes from a m/\.[a-z]{2}/i domain, use extreme caustion
>> 2. If it comes from someone you don't know, use extreme caution
>> 3. If it doesn't apply to any discussions you're actively in...
>> 4. If it didn't come from a mailing list you're subscribed to, or a person
>> you know and trust...
>> 5. If it doesn't concern your immediate (G/PG rated) interests (see
>> example below, eh?)...
>>
>> basically, common sense applies.
>>
>> William Sutton
>>
>> On Tue, 6 Jan 2009, JRR wrote:
>>
>> > John Ross wrote;
>> >
>> > I have received Emails in the past (recently) with both the subject and
>> > sender totally blank.
>> > I never opened any of them. Fortunately they messed up the dates and
>> > they were
>> > all time stamped  12-31-1969 at  24:00:00  so it was easy to filter them.
>> >
>> > I have also had tremendous problems with  "Christmas Island"  country
>> > code .CX
>> > They're just off the coast of Australia, part of the "Kingdom of
>> > Iribundi" and the
>> > Australians would like to wring their necks...  They are Pirates going
>> > back 200 years
>> > and now they have adopted the Internet as their main method. They
>> > drained 4.x MB
>> > out of my desktop before I cut them off.  That was two years ago.
>> > Several unsuccessful
>> > attempts were made on my Internet Identities. I was forwarded to one of
>> > their sites by
>> > clicking on a picture.
>> >
>> >
>> > Jay Hart wrote:
>> >> I assume it is possible to forge an email header.  What is the
>> probability
>> >> that this was forged?  I've copied the entire header below:
>> >>
>> >> Jay
>> >>
>> >> Return-Path: <jhart at kevla.org>
>> >> X-Original-To: jhart at kevla.org
>> >> Delivered-To: jhart at kevla.org
>> >> Received: from localhost (localhost [127.0.0.1])
>> >>      by email.kevla.org (Postfix) with ESMTP id 85B2A56460
>> >>      for <jhart at kevla.org>; Tue, 6 Jan 2009 11:10:29 -0500 (EST)
>> >> X-Virus-Scanned: amavisd-new at kevla.org
>> >> X-Spam-Score: 3.123
>> >> X-Spam-Level: ***
>> >> X-Spam-Status: No, score=3.123 tagged_above=-100 required=3.14
>> >>      tests=[AWL=-7.523, BAYES_20=-0.74, HTML_IMAGE_ONLY_20=1.157,
>> >>      HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.881,
>> MIME_HTML_ONLY=0.001,
>> >>      MSGID_FROM_MTA_ID=1.393, NO_REAL_NAME=0.961,
>> RCVD_IN_SORBS_WEB=1.456,
>> >>      RCVD_IN_XBL=3.897, URIBL_SBL=1.639]
>> >> Received: from email.kevla.org ([127.0.0.1])
>> >>      by localhost (email.kevla.org [127.0.0.1]) (amavisd-new, port
>> 10024)
>> >>      with ESMTP id 3+PVWtgj+yTU for <jhart at kevla.org>;
>> >>      Tue, 6 Jan 2009 11:10:21 -0500 (EST)
>> >> Received: from [41.250.240.76] (unknown [41.250.240.76])
>> >>      by email.kevla.org (Postfix) with ESMTP id BF487563B1
>> >>      for <jhart at kevla.org>; Tue, 6 Jan 2009 11:10:20 -0500 (EST)
>> >> To: <jhart at kevla.org>
>> >> Subject: Jessica Alba giving good head
>> >> From: <jhart at kevla.org>
>> >> MIME-Version: 1.0
>> >> Importance: High
>> >> Content-Type: text/html
>> >> Message-Id: <20090106161020.BF487563B1 at email.kevla.org>
>> >> Date: Tue, 6 Jan 2009 11:10:20 -0500 (EST)
>> >>
>> >>
>> >> _______________________________________________
>> >> Novalug mailing list
>> >> Novalug at calypso.tux.org
>> >> http://calypso.tux.org/cgi-bin/mailman/listinfo/novalug
>> >>
>> >>
>> >>
>> >
>> > _______________________________________________
>> > Novalug mailing list
>> > Novalug at calypso.tux.org
>> > http://calypso.tux.org/cgi-bin/mailman/listinfo/novalug
>> >
>> >
>> _______________________________________________
>> Novalug mailing list
>> Novalug at calypso.tux.org
>> http://calypso.tux.org/cgi-bin/mailman/listinfo/novalug
>>
>
>
>
> --
>
>
> --Joseph Brinkley
> _______________________________________________
> Ma-linux mailing list
> Ma-linux at calypso.tux.org
> http://calypso.tux.org/cgi-bin/mailman/listinfo/ma-linux
>