Hello Spike,

On Wednesday, May 15, 2002 at 4:51:58 PM you wrote in
[EMAIL PROTECTED]">mid:[EMAIL PROTECTED] (at least in part):

S> Spammers have a trick they now use, which works if they know the
S> "name" of the default mail server of the ISP.  They can send a
S> message to "whatever"@"mailservername" and EVERYONE on the
S> mailserver gets a message!

Absolutely WRONG!
Unless the MTA does not offer a 'global distributor list' is simply _IS
NOT_ possible to send an e-mail to all users by only sending it to the
server directly instead of one domain this server handles the mail for.
The domain part of recipient address(es) a mail is sent to only affects
what configuration a mail server uses to handle the mail. In other words:
it decides if the mail has to be treaded as 'local' or 'remote' on basis of
the domain part (everything after '@', no matter is 'domain only' or 'full
qualified domain name' of the server) and where to look if this is a valid
address.
There's no way to tell an MTA _in general_ to deliver mail to _all_ known
local recipients.

S> The "whatever" can actually be anything they wish to type!

So I'd only need to send a mail to

[EMAIL PROTECTED]

and _every_ user on this system would get it? Stupid!
In best case it will only delivered to you, but it might even be possible
not even this will happen but the mail bounces if e.g. 'candw.ky' is
configured on this server and delivery instructions exist, but
'perkey.candw.ky' is setup to be local but _non deliverable_ ...

This is a very complex issue, but to all 'non-techies' out there:
unless you're ISP / mail hoster does NOT setup a 'catch all' or 'global
distribution account' there's no chance you will get all spam 'just
because' ... Even if you're not mentioned in 'To:' and 'CC:' the mail has
to be _directed_ to your address for you getting it.
This is possible, because e-mail is delivered using an 'envelope' which is
_completely_ independent from informations visible in mail header!
This envelope is dropped with final delivery, that's why you can't see it,
but it's present and used all the transport way ... And somewhere in this
header your address appears or you woun't get the message. Period.

To the 'The Bat! is phoning home and causing UCE' problem: TB! is _not_
phoning home (have tested this with network capture!) and it seems you
(ztrader) in fact only got the 'welcome' message, hardcoded into the program.

Ciao Pit
-- 
Regards
Peter Palmreuther                            mailto:[EMAIL PROTECTED]
(The Bat! v1.60j on Windows 2000 5.0 Build 2195 Service Pack 2)

A non-vegetarian anti-abortionist is a contradiction in terms.


________________________________________________________
Current Ver: 1.60k
FAQ        : http://faq.thebat.dutaint.com 
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives   : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Bug Reports: https://bt.ritlabs.com

Reply via email to