you can use fsockopen to connect to an open relay server, then most servers also removes the client's sender IP in which case it will just lead you to a dead end at the mail server's IP
:)
On 5/13/06, Rogelio Serrano <[EMAIL PROTECTED]> wrote:
On 5/13/06, Eri Mendz <[EMAIL PROTECTED]> wrote:
> So ang huling "Received: from" pala matutukoy. Pwde ba to ma forge or no? In my case im looking at several emails that i have suspicion with however the originating ip's point to the same location. The strange thing is: in the email body the company address shown is different, eg., UK ang office pero ang ip origin Nigeria. Possible ba to?
>
> Thank you Peter sa input mo.
>
All headers in an smtp email can be forged.
The "received from:" header chain cannot be forged though. Additional
entries can be added before the email is actually sent. and the real
ip can actually be found after the first few inserted headers.
The real kicker is using a customised smtp server or a network of smtp servers.
The only practical way to protect yourself from forged smtp headers is
to use signed email or use x.400 ;-)
I heard the us military is using x.400 email to send and receive data.
Even among planes and tanks. Imagine what it would be like if they
used smtp instead.
--
www.smsglobal.net SMS Global Ltd Short Message Service For Seafarers
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
[email protected] (#PLUG @ irc.free.net.ph)
Read the Guidelines: http://linux.org.ph/lists
Searchable Archives: http://archives.free.net.ph
--
--
To contact me anytime and anywhere via SMS:
MSG GODIE <YOUR MESSAGE>
then send to 2948 for Globe/Sun and 3940 for Smart.
You want to have your own Mobile Address like me? Get it FREE at www.Txtmokko.com
--
PUT YOUR ADS ON THE HAND OF 35 MILLION PEOPLE. GET YOUR DOMAIN FOR MOBILE AT http://www.TxtDOMAIN.com
_
Roger P. Filomeno
Mobile Specialist / R&D
http://corruptedpartition.blogspot.com/
* Finger Apps Inc, http://fingerapps.com * TXTMOKKO, http://txtmokko.com * MyAyala, http://myayala.com * KayaMoney e-Commerce, http://kayamoney.com/ * KayaShop e-Market, http://kayamoney.com/shop/ * Registered Linux User # 367694 * PGP IDs: 0xCB5F3FF7 / 0xDF7D2589 (http://keyserver.pgp.com )
_________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List [email protected] (#PLUG @ irc.free.net.ph) Read the Guidelines: http://linux.org.ph/lists Searchable Archives: http://archives.free.net.ph
