> I've wondered how one goes about spoofing the "from" address, since 
that's 
> such a common tactic for spam and other undesirable mail. My sister just 
got 
> an email with a virus the other day, and the return address claimed it 
was 
> from me. I haven't seen any way within AOL to monkey with the return 
address 
> - is this just an AOL restriction?

Aol does not show the whole email header. Usually the Sender: field has 
the actuall sender, but the virus plops in someone elses email address in 
the From: field. In most emails you can do this when you set up the email 
address for the account, since it is just a text field. The Sender field 
is the on put in by the email server that is difficult to spoof. Email 
servers that allow anonymous mail forwarding such as uunet used to use can 
be used to spam by telling the machine to forward a message with a bogus 
header. This is why most ISPs will now only accept mail when you are 
logged into their net

Since you are using AOL mail most of the viruses won't be able to get to 
your address book to send itself to all your friends, but they can still 
attach to your files and try other ways to propagate. I recently saw this 
while looking about a virus for my sister I found something similar. It 
was attached to many files, but hadn't emailed out since it didn't 
understand AOL so it didn't send mail out. 

It was interesting to see all the new Linux viruses listed on McAffee 
though. There weren't as many as Win32, but there were a few of them.


Robert D. LaMoreaux
MTS Systems Corp. 
Powertrain technology Division
4622 Runway Blvd.
Ann Arbor, MI 48108
734-822-9696
Fax 734-973-1103
Main Desk 734-973-1111


************************************************************************
* Tracking #: B1FFF8AB3FB6C542AF98D592103DA37EEDB703C2
*
************************************************************************

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
* To post a message: mailto:[EMAIL PROTECTED]
*
* To leave this list visit:
* http://www.techservinc.com/protelusers/leave.html
*
* Contact the list manager:
* mailto:[EMAIL PROTECTED]
*
* Forum Guidelines Rules:
* http://www.techservinc.com/protelusers/forumrules.html
*
* Browse or Search previous postings:
* http://www.mail-archive.com/proteledaforum@techservinc.com
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

Reply via email to