> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > Behalf Of Erik Reuter
... > On Wed, Dec 04, 2002 at 05:46:57PM -0800, Nick Arnett wrote: > > > Jeroen (which also allowed it to slip by sendmail's access block). > > That message also contained a forged hostname: "notebook.mccmedia.com > > ([212.83.87.23])" > > Are you sure? My reading of the headers is that it didn't go through > your system at all. Jeroen just sent it out to everyone from the old > Brin-L list that he had (recipient list suppressed). I guess he BCC'd > it. Yes -- it came to me at the same time as others received it. I put the domain name in sendmail's access database, rather than bothering to figure out what networks they're using. So it sailed right by. > See the headers of the message I received below. It allegedly originated > at notebook.mccmedia.com, which is obviously forged, then it went to > amsfep15-int.chello.nl, Jeroen's ISP's mailserver. Then it went directly > to me. It doesn't look to me like your listserv processed it at all. You're right, it didn't go through the list server. Sorry if I wasn't clear about that. The listserver can't be fooled quite so easily. It came to me just as it came to you. I thought about including the entire headers in my message, but didn't want to have to explain the whole thing... as you kindly did. Gotta wonder what'll be next. Nick _______________________________________________ http://www.mccmedia.com/mailman/listinfo/brin-l
