Adi Nugroho wrote:
I have received a spam email pretended to be from myself (from
[email protected] to [email protected]).
But the SPF not checking the sender domain's SPF.
It it checking for ogl.co.uk SPF entry.
How it is possible?
Received-SPF: none (ns2: domain at ogl.co.uk does not designate permitted
sender hosts)
X-Originating-IP: 79.109.53.76 by 253.236.182.60; Sat, 07 Mar 2009 00:41:38
+0500
Message-ID: <[email protected]>
To: "Avery Coffey" <[email protected]>
From: "Emmett Kenny" <[email protected]>
There are 2 separate 'from' addresses, one on the contents (which you
see here), and separate one on the 'envelope' or message header. If you
view the message source (using your client program, or perhaps 'less' in
Linux), you'll see the header/envelope from address (and more details
about the message as well).
These 2 addresses are not necessarily the same, and both are easily spoofed.
--
-Eric 'shubes'
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
