RE: How is this possible ?

2002-02-27 Thread Dupler, Craig

Yes, that's why you do it from the public library.

-Original Message-
From: Mark Rotman [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 10:12 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


Actually,

You can skip all the 822 fields and most hosts will allow you to specify the
from as anything. Some may require a valid domain, but it does not need to
be your own. The only giveaway might be the return-path in the header. In
this case the TO will match the 821 rcpt to.

telnet  25
helo FakeServer.com
mail from: <[EMAIL PROTECTED]>
rcpt to: <[EMAIL PROTECTED]>
data

test message
quit

-Original Message-
From: Exchange Discussions [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 12:54 PM
Subject: RE: How is this possible ?


In the header, all fields are optional, except that one of the three "to"
fields (to, cc, and bcc) has to have something in it.  It does not matter
which one. Delivery can occur if the correct address is in any of the
three, NOT JUST THE "TO" FIELD.  Of the three, mail readers only display
two.  BCC is not displayed.  In fact, you can use a telnet utility to
directly craft a header any way you want it, including leaving the from
field blank of plugging in someone else's address.  Nothing in the RFCs
prevent this.  Not many applications do this deliberately, but you can see
how an anonymous mail host works - yes?

So, if the "to" field has a different address and the "cc" field is blank,
where was the address that caused delivery?  
-Original Message-
From: William Lefkovics [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 9:35 AM
Subject: RE: How is this possible ?


Or RFC2821/2822.

I've read them several times and I still don't understand the foundation
technology.  Can't we wipe it clean and start over?


-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 8:44 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


I keep telling y'all to read RFCs 821 and 822.  This all becomes a lot
clearer when you understand the foundation technology.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
Compaq Computer Corporation
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
Sent: Wednesday, February 27, 2002 7:42 AM
To: Exchange Discussions
Subject: How is this possible ?


I have a user who received an email where the TO: field showed a
'bellatlantic.net' email address (which he claims he doesn't own).
However, the email showed up on our Exchange server in his Exchange
mailbox (on his 'aim.org' email address)

How is this possible ?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: How is this possible ?

2002-02-27 Thread Dupler, Craig

One cupie doll to the customer in the argyle sweater.

-Original Message-
From: RBHATIA [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 10:40 AM
To: Exchange Discussions
Subject: RE: How is this possible ?



So I guess this user used the BCC field to send email to this person. 

-Original Message-
From: Dupler, Craig [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 12:55 PM
To: Exchange Discussions
Subject: RE: How is this possible ?


In the header, all fields are optional, except that one of the three "to"
fields (to, cc, and bcc) has to have something in it.  It does not matter
which one. Delivery can occur if the correct address is in any of the
three, NOT JUST THE "TO" FIELD.  Of the three, mail readers only display
two.  BCC is not displayed.  In fact, you can use a telnet utility to
directly craft a header any way you want it, including leaving the from
field blank or plugging in someone else's address.  Nothing in the RFCs
prevent this.  Not many applications do this deliberately, but you can see
how an anonymous mail host works - yes?

So, if the "to" field has a different address and the "cc" field is blank,
where was the address that caused delivery? 
 

-Original Message-
From: William Lefkovics [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 9:35 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


Or RFC2821/2822.

I've read them several times and I still don't understand the foundation
technology.  Can't we wipe it clean and start over?


-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 8:44 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


I keep telling y'all to read RFCs 821 and 822.  This all becomes a lot
clearer when you understand the foundation technology.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
Compaq Computer Corporation
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of RBHATIA
Sent: Wednesday, February 27, 2002 7:42 AM
To: Exchange Discussions
Subject: How is this possible ?


I have a user who received an email where the TO: field showed a
'bellatlantic.net' email address (which he claims he doesn't own).
However, the email showed up on our Exchange server in his Exchange
mailbox (on his 'aim.org' email address)

How is this possible ?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: How is this possible ?

2002-02-27 Thread RBHATIA


So I guess this user used the BCC field to send email to this person. 

-Original Message-
From: Dupler, Craig [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 12:55 PM
To: Exchange Discussions
Subject: RE: How is this possible ?


In the header, all fields are optional, except that one of the three "to"
fields (to, cc, and bcc) has to have something in it.  It does not matter
which one. Delivery can occur if the correct address is in any of the
three, NOT JUST THE "TO" FIELD.  Of the three, mail readers only display
two.  BCC is not displayed.  In fact, you can use a telnet utility to
directly craft a header any way you want it, including leaving the from
field blank of plugging in someone else's address.  Nothing in the RFCs
prevent this.  Not many applications do this deliberately, but you can see
how an anonymous mail host works - yes?

So, if the "to" field has a different address and the "cc" field is blank,
where was the address that caused delivery? 
 

-Original Message-
From: William Lefkovics [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 9:35 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


Or RFC2821/2822.

I've read them several times and I still don't understand the foundation
technology.  Can't we wipe it clean and start over?


-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 8:44 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


I keep telling y'all to read RFCs 821 and 822.  This all becomes a lot
clearer when you understand the foundation technology.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
Compaq Computer Corporation
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of RBHATIA
Sent: Wednesday, February 27, 2002 7:42 AM
To: Exchange Discussions
Subject: How is this possible ?


I have a user who received an email where the TO: field showed a
'bellatlantic.net' email address (which he claims he doesn't own).
However, the email showed up on our Exchange server in his Exchange
mailbox (on his 'aim.org' email address)

How is this possible ?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: How is this possible ?

2002-02-27 Thread Mark Rotman

Actually,

You can skip all the 822 fields and most hosts will allow you to specify the
from as anything. Some may require a valid domain, but it does not need to
be your own. The only giveaway might be the return-path in the header. In
this case the TO will match the 821 rcpt to.

telnet  25
helo FakeServer.com
mail from: <[EMAIL PROTECTED]>
rcpt to: <[EMAIL PROTECTED]>
data

test message
quit

-Original Message-
From: Exchange Discussions [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 12:54 PM
Subject: RE: How is this possible ?


In the header, all fields are optional, except that one of the three "to"
fields (to, cc, and bcc) has to have something in it.  It does not matter
which one. Delivery can occur if the correct address is in any of the
three, NOT JUST THE "TO" FIELD.  Of the three, mail readers only display
two.  BCC is not displayed.  In fact, you can use a telnet utility to
directly craft a header any way you want it, including leaving the from
field blank of plugging in someone else's address.  Nothing in the RFCs
prevent this.  Not many applications do this deliberately, but you can see
how an anonymous mail host works - yes?

So, if the "to" field has a different address and the "cc" field is blank,
where was the address that caused delivery?  
-Original Message-
From: William Lefkovics [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 9:35 AM
Subject: RE: How is this possible ?


Or RFC2821/2822.

I've read them several times and I still don't understand the foundation
technology.  Can't we wipe it clean and start over?


-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 8:44 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


I keep telling y'all to read RFCs 821 and 822.  This all becomes a lot
clearer when you understand the foundation technology.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
Compaq Computer Corporation
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
Sent: Wednesday, February 27, 2002 7:42 AM
To: Exchange Discussions
Subject: How is this possible ?


I have a user who received an email where the TO: field showed a
'bellatlantic.net' email address (which he claims he doesn't own).
However, the email showed up on our Exchange server in his Exchange
mailbox (on his 'aim.org' email address)

How is this possible ?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: How is this possible ?

2002-02-27 Thread Dupler, Craig

In the header, all fields are optional, except that one of the three "to"
fields (to, cc, and bcc) has to have something in it.  It does not matter
which one. Delivery can occur if the correct address is in any of the
three, NOT JUST THE "TO" FIELD.  Of the three, mail readers only display
two.  BCC is not displayed.  In fact, you can use a telnet utility to
directly craft a header any way you want it, including leaving the from
field blank of plugging in someone else's address.  Nothing in the RFCs
prevent this.  Not many applications do this deliberately, but you can see
how an anonymous mail host works - yes?

So, if the "to" field has a different address and the "cc" field is blank,
where was the address that caused delivery? 
 

-Original Message-
From: William Lefkovics [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 9:35 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


Or RFC2821/2822.

I've read them several times and I still don't understand the foundation
technology.  Can't we wipe it clean and start over?


-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 8:44 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


I keep telling y'all to read RFCs 821 and 822.  This all becomes a lot
clearer when you understand the foundation technology.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
Compaq Computer Corporation
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of RBHATIA
Sent: Wednesday, February 27, 2002 7:42 AM
To: Exchange Discussions
Subject: How is this possible ?


I have a user who received an email where the TO: field showed a
'bellatlantic.net' email address (which he claims he doesn't own).
However, the email showed up on our Exchange server in his Exchange
mailbox (on his 'aim.org' email address)

How is this possible ?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: How is this possible ?

2002-02-27 Thread Roger Seielstad

Perzactly...

--
Roger D. Seielstad - MCSE
Sr. Systems Administrator
Peregrine Systems
Atlanta, GA


> -Original Message-
> From: Ed Crowley [mailto:[EMAIL PROTECTED]] 
> Sent: Wednesday, February 27, 2002 12:39 PM
> To: Exchange Discussions
> Subject: RE: How is this possible ?
> 
> 
> After reading them and (I think) understanding them, I'm 
> amazed that e-mail flows at all.
> 
> Ed Crowley MCSE+Internet MVP kcCC+I
> Tech Consultant
> Compaq Computer Corporation
> Protecting the world from PSTs and Bricked Backups!
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of 
> William Lefkovics
> Sent: Wednesday, February 27, 2002 9:35 AM
> To: Exchange Discussions
> Subject: RE: How is this possible ?
> 
> 
> Or RFC2821/2822.
> 
> I've read them several times and I still don't understand the 
> foundation technology.  Can't we wipe it clean and start over?
> 
> 
> -Original Message-
> From: Ed Crowley [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, February 27, 2002 8:44 AM
> To: Exchange Discussions
> Subject: RE: How is this possible ?
> 
> 
> I keep telling y'all to read RFCs 821 and 822.  This all 
> becomes a lot clearer when you understand the foundation technology.
> 
> Ed Crowley MCSE+Internet MVP kcCC+I
> Tech Consultant
> Compaq Computer Corporation
> Protecting the world from PSTs and Bricked Backups!
> 
> 
> -Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of RBHATIA
> Sent: Wednesday, February 27, 2002 7:42 AM
> To: Exchange Discussions
> Subject: How is this possible ?
> 
> 
> I have a user who received an email where the TO: field 
> showed a 'bellatlantic.net' email address (which he claims he 
> doesn't own). However, the email showed up on our Exchange 
> server in his Exchange mailbox (on his 'aim.org' email address)
> 
> How is this possible ?
> 
> _
> List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
> Archives:   http://www.swynk.com/sitesearch/search.asp
> To unsubscribe: mailto:[EMAIL PROTECTED]
> Exchange List admin:[EMAIL PROTECTED]
> 
> 
> _
> List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
> Archives:   http://www.swynk.com/sitesearch/search.asp
> To unsubscribe: mailto:[EMAIL PROTECTED]
> Exchange List admin:[EMAIL PROTECTED]
> 
> _
> List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
> Archives:   http://www.swynk.com/sitesearch/search.asp
> To unsubscribe: mailto:[EMAIL PROTECTED]
> Exchange List admin:[EMAIL PROTECTED]
> 
> 
> _
> List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
> Archives:   http://www.swynk.com/sitesearch/search.asp
> To unsubscribe: mailto:[EMAIL PROTECTED]
> Exchange List admin:[EMAIL PROTECTED]
> 

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: How is this possible ?

2002-02-27 Thread Ed Crowley

After reading them and (I think) understanding them, I'm amazed that
e-mail flows at all.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
Compaq Computer Corporation
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of William
Lefkovics
Sent: Wednesday, February 27, 2002 9:35 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


Or RFC2821/2822.

I've read them several times and I still don't understand the foundation
technology.  Can't we wipe it clean and start over?


-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 8:44 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


I keep telling y'all to read RFCs 821 and 822.  This all becomes a lot
clearer when you understand the foundation technology.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
Compaq Computer Corporation
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of RBHATIA
Sent: Wednesday, February 27, 2002 7:42 AM
To: Exchange Discussions
Subject: How is this possible ?


I have a user who received an email where the TO: field showed a
'bellatlantic.net' email address (which he claims he doesn't own).
However, the email showed up on our Exchange server in his Exchange
mailbox (on his 'aim.org' email address)

How is this possible ?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: How is this possible ?

2002-02-27 Thread William Lefkovics

Or RFC2821/2822.

I've read them several times and I still don't understand the foundation
technology.  Can't we wipe it clean and start over?


-Original Message-
From: Ed Crowley [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, February 27, 2002 8:44 AM
To: Exchange Discussions
Subject: RE: How is this possible ?


I keep telling y'all to read RFCs 821 and 822.  This all becomes a lot
clearer when you understand the foundation technology.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
Compaq Computer Corporation
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of RBHATIA
Sent: Wednesday, February 27, 2002 7:42 AM
To: Exchange Discussions
Subject: How is this possible ?


I have a user who received an email where the TO: field showed a
'bellatlantic.net' email address (which he claims he doesn't own).
However, the email showed up on our Exchange server in his Exchange
mailbox (on his 'aim.org' email address)

How is this possible ?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: How is this possible ?

2002-02-27 Thread Ed Crowley

I keep telling y'all to read RFCs 821 and 822.  This all becomes a lot
clearer when you understand the foundation technology.

Ed Crowley MCSE+Internet MVP kcCC+I
Tech Consultant
Compaq Computer Corporation
Protecting the world from PSTs and Bricked Backups!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of RBHATIA
Sent: Wednesday, February 27, 2002 7:42 AM
To: Exchange Discussions
Subject: How is this possible ?


I have a user who received an email where the TO: field showed a
'bellatlantic.net' email address (which he claims he doesn't own).
However, the email showed up on our Exchange server in his Exchange
mailbox (on his 'aim.org' email address)

How is this possible ?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: How is this possible ?

2002-02-27 Thread Martin Blackstone

BCC?

-Original Message-
From: RBHATIA [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, February 27, 2002 7:42 AM
To: Exchange Discussions
Subject: How is this possible ?


I have a user who received an email where the TO: field showed a
'bellatlantic.net' email address (which he claims he doesn't own). However,
the email showed up on our Exchange server in his Exchange mailbox (on his
'aim.org' email address)

How is this possible ?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: How is this possible ?

2002-02-27 Thread Myles, Damian

It's possible to setup SMTP masquerading to mask the true domain to reply to messages.

-Original Message-
From: RBHATIA [mailto:[EMAIL PROTECTED]]
Sent: 27 February 2002 16:42
To: Exchange Discussions
Subject: How is this possible ?


I have a user who received an email where the TO: field showed a
'bellatlantic.net' email address (which he claims he doesn't own). However,
the email showed up on our Exchange server in his Exchange mailbox (on his
'aim.org' email address)

How is this possible ?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



Re: How is this possible ?

2002-02-27 Thread Daniel Chenault

BCC is one possibility, forged headers is another.

Short answer: a message has two components: the P1, or envelope, and P2, the
body. For SMTP the addressing in the P1 does not have to match the
addressing in P2. P1 gets the message delivered, P2 is what populates the
message fields.

- Original Message -
From: "RBHATIA" <[EMAIL PROTECTED]>
To: "Exchange Discussions" <[EMAIL PROTECTED]>
Sent: Wednesday, February 27, 2002 9:42 AM
Subject: How is this possible ?


> I have a user who received an email where the TO: field showed a
> 'bellatlantic.net' email address (which he claims he doesn't own).
However,
> the email showed up on our Exchange server in his Exchange mailbox (on his
> 'aim.org' email address)
>
> How is this possible ?
>
> _
> List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
> Archives:   http://www.swynk.com/sitesearch/search.asp
> To unsubscribe: mailto:[EMAIL PROTECTED]
> Exchange List admin:[EMAIL PROTECTED]
>

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



How is this possible ?

2002-02-27 Thread RBHATIA

I have a user who received an email where the TO: field showed a
'bellatlantic.net' email address (which he claims he doesn't own). However,
the email showed up on our Exchange server in his Exchange mailbox (on his
'aim.org' email address)

How is this possible ?

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: Is this possible?

2001-12-18 Thread Chris Scharff

Most likely a spurious happenstance.

> -Original Message-
> From: Dustin Krysak [mailto:[EMAIL PROTECTED]] 
> Sent: Tuesday, December 18, 2001 1:34 PM
> To: Exchange Discussions
> Subject: Is this possible?
> 
> 
> Hi there...
> 
> Sorta OT - but just wanted to pick the brain of a bunch of 
> mail admins.
> 
> Our company sent out a Christmas greeting this am that was an 
> html email, but with nothing more than a link to a flash 
> movie online (self produced) on our web server...
> 
> One of our clients said that as soon as he opened our email 
> his outlook closed down, and he can't get back into mail.
> 
> The client never even clicked the link or anything... He 
> barely even had a chance to look at it.
> 
> There were no attachments... Just a link on the format of:
> 
http://www.server.com/page.html

I don't see how this is possible

I wanted to be sure before I put this one up to chance.

Thanks in advance!

Dustin


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



RE: Is this possible?

2001-12-18 Thread Martin Blackstone

I doubt it...
Send the link. Ill test it...

-Original Message-
From: Dustin Krysak [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, December 18, 2001 11:34 AM
To: Exchange Discussions
Subject: Is this possible?


Hi there...

Sorta OT - but just wanted to pick the brain of a bunch of mail admins.

Our company sent out a Christmas greeting this am that was an html email,
but with nothing more than a link to a flash movie online (self produced) on
our web server...

One of our clients said that as soon as he opened our email his outlook
closed down, and he can't get back into mail.

The client never even clicked the link or anything... He barely even had a
chance to look at it.

There were no attachments... Just a link on the format of:

http://www.server.com/page.html

I don't see how this is possible

I wanted to be sure before I put this one up to chance.

Thanks in advance!

Dustin


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]

_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]



Is this possible?

2001-12-18 Thread Dustin Krysak

Hi there...

Sorta OT - but just wanted to pick the brain of a bunch of mail admins.

Our company sent out a Christmas greeting this am that was an html email,
but with nothing more than a link to a flash movie online (self produced) on
our web server...

One of our clients said that as soon as he opened our email his outlook
closed down, and he can't get back into mail.

The client never even clicked the link or anything... He barely even had a
chance to look at it.

There were no attachments... Just a link on the format of:

http://www.server.com/page.html

I don't see how this is possible

I wanted to be sure before I put this one up to chance.

Thanks in advance!

Dustin


_
List posting FAQ:   http://www.swinc.com/resource/exch_faq.htm
Archives:   http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin:[EMAIL PROTECTED]