On 5/13/06, Eri Mendz <[EMAIL PROTECTED]> wrote:
So ang huling "Received: from" pala matutukoy. Pwde ba to ma forge or no? In my
case im looking at several emails that i have suspicion with however the originating ip's
point to the same location. The strange thing is: in the email body the company address
shown is different, eg., UK ang office pero ang ip origin Nigeria. Possible ba to?
Thank you Peter sa input mo.
All headers in an smtp email can be forged.
The "received from:" header chain cannot be forged though. Additional
entries can be added before the email is actually sent. and the real
ip can actually be found after the first few inserted headers.
The real kicker is using a customised smtp server or a network of smtp servers.
The only practical way to protect yourself from forged smtp headers is
to use signed email or use x.400 ;-)
I heard the us military is using x.400 email to send and receive data.
Even among planes and tanks. Imagine what it would be like if they
used smtp instead.
--
www.smsglobal.net SMS Global Ltd Short Message Service For Seafarers
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
[email protected] (#PLUG @ irc.free.net.ph)
Read the Guidelines: http://linux.org.ph/lists
Searchable Archives: http://archives.free.net.ph
