In this case, the SPF record probably will play a big role to evaluate senders ip.
"you can _always_ forge Received"- what does it mean _always_? You mean with the help of the infected machine only? Regards, Dmitri Elgin, http://imailzip.com -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Friday, August 06, 2004 2:30 PM To: Dmitri Elgin Subject: Re[4]: [IMail Forum] Forwarding to AOL members - This is spam function > Well, I assumed that it's possible, but it's not as easy to > reproduce as just to send spam throught an open relay. No, it's a lot easier, since you can _always_ forge Received: headers, while open public relays are a lot harder to find these days than they were a few years ago. And the two tactics were never mutually exclusive. In any case, the vector of choice these days is the stealth MTA, a.k.a. virus-injected private/proxy relay, a.k.a. whatever you want to call it. --Sandy ------------------------------------ Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/rel ease/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/dow nload/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/downloa d/release/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
