Re: Can originating mail server be spoofed?

[Howie Hamlin]

The last RECEIVED header (which is at the top and is added by your email server) should be the only header considered reliable.  From that header you can assertain the host that the email was sent from.  Unfortunately, most SPAM is sent from zombied broadband subscribers and/or open proxies so it's not always that simple to track down senders.

One thing that you can do - is to take the sending IP address and use RBLs to at least determine if the mail was sent by a dynamic IP or proxy.  You can also try to ensure that the sending server has a valid RDNS.

HTH,

--
Howie Hamlin - inFusion Project Manager
On-Line Data Solutions, Inc. - www.CoolFusion.com
inFusion Mail Server (iMS) - The Award-winning, Intelligent Mail Server
PrismAV - Virus scanning for ColdFusion applications
>>> Find out how iMS Stacks up to the competition: http://www.coolfusion.com/imssecomparison.cfm

  ----- Original Message -----
  From: Samuel R. Neff
  To: CF-Talk
  Sent: Tuesday, July 06, 2004 2:59 AM
  Subject: Can originating mail server be spoofed?

  In mail headers, it shows a trail of mail servers between the originating
  smtp server and the receiving user.  Are any of these servers guaranteed
  accurate, particularly the originating server or is it easy to spoof the
  servers along the trail?

  I'm working on an app that allows submitting some info via e-mail and am
  considering whether or not it's worthwhile to even check this server as one
  of the security checks.

  Thanks,

  Sam

  ----------------------------------------
  Blog http://www.rewindlife.com
  TeamMM http://www.macromedia.com/go/team
  ----------------------------------------

---

[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings] [Donations and Support]

---