How do you verify if it came from your server... contact them and ask
them to check their records? Is there an automated method for doing that?
What would someone have had to do get mail into my ISP's download to my
personal computer's email client while replacing the normal header dates
with their own?
I know everyone says, as Tom did, that it's not a difficult but I have
never understood how that is easily possible. If they have to place
themselves between my mail server and intercept and handle all my
server's mail to me for a period so they can interject their falsely
dated mail that seems fairly complex and unlikely in this case. If they
can just occasionally slip their mail to me into the stream from my
server to me with false headers, then it seems more conceivable in this
case..
The reason I'm asking is that I'm trying to ascertain the likelihood
that the header time stamps on some mail I have received from a sender
are accurate or possibly fabricated.
db
John DeCarlo wrote:
Remember that email headers are just text. And there are no checks on those
headers, practically speaking.
If someone spoofs your mail server, everything in that message could be
false.
If you have verified that the message came from your real mail server, then
there is a reasonably good chance that the time stamp it added to your
header is real.
On 10/8/07, db <[EMAIL PROTECTED]> wrote:
Does anyone know if the times listed in email headers can be spoofed?
If the sender changes their clock date/ time then the sending date/ time
is spoofed but it seems to be that the server transit point times list
on full header could not be spoofed. Is that true or false... does
anyone know?
************************************************************************
* ==> QUICK LIST-COMMAND REFERENCE - Put the following commands in <==
* ==> the body of an email & send 'em to: [EMAIL PROTECTED] <==
* Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name
* Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST
* Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L
* New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress
* Need more help? Send mail to: [EMAIL PROTECTED]
************************************************************************
* List archive at www.mail-archive.com/[email protected]/
* RSS at www.mail-archive.com/[email protected]/maillist.xml
* Messages bearing the header "X-No-Archive: yes" will not be archived
************************************************************************
