Return-Path: Delivered-To: apmail-jakarta-james-dev-archive@apache.org Received: (qmail 6336 invoked from network); 22 Mar 2002 08:22:30 -0000 Received: from unknown (HELO nagoya.betaversion.org) (192.18.49.131) by daedalus.apache.org with SMTP; 22 Mar 2002 08:22:30 -0000 Received: (qmail 11081 invoked by uid 97); 22 Mar 2002 08:22:35 -0000 Delivered-To: qmlist-jakarta-archive-james-dev@jakarta.apache.org Received: (qmail 10904 invoked by uid 97); 22 Mar 2002 08:22:34 -0000 Mailing-List: contact james-dev-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "James Developers List" Reply-To: "James Developers List" Delivered-To: mailing list james-dev@jakarta.apache.org Received: (qmail 10825 invoked from network); 22 Mar 2002 08:22:33 -0000 From: "Danny Angus" To: "James Developers List" Subject: RE: SPAM #3 Date: Fri, 22 Mar 2002 08:22:01 -0000 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) In-Reply-To: <3C9A5FEB.7080202@yahoo.com> Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6700 X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N > Spammers use an openrelay SMTP server to post thru. Let's call that > machine A. They make their headers appear to be from elsewhere. Let's > say that is machine B (it might be real or not). When the mail arrives > at machine C (it's desination), that mail server can see evidence of B > (clearly), but also information pertaining to A? Or is it that only > information from some uplink A connects to is evident? C should append a line a bit like: "received by C[123.123.123.123] from A[432.432.432.432] at 00:00 GMT +0000" > > If C sends a digest (subject of a new RFC) to B of the message through > SMTP saying "did you send this?", then there are two possibilities - (1) > The answer is "no I did not", or (2) no such mail server. Does A have > record of the email? pretty much not, once its sent or bounced the MTA is glad to get rid and reclaim the space. > If it does, can it determine that it was from the > real email user? Possibly yes depending how tightly it is set up itself to prevent relaying, more likely no, if A has faked a message from a real user of B it would be hard to differentiate from a bona fide one. > Does this cover all the bases? > > Hmmm, I have half a feeling that this has been explained to me > already..... > > Regards, -- To unsubscribe, e-mail: For additional commands, e-mail: