Re: ATTN: Chris C

Article View: altnet.general

Article #698

#698

From: Eli the Bearded
Date: Sun, 27 Jul 1997 00:00

23 lines
2172 bytes

In article <33e386f2.339584226@news.alt.net>,
The Prince of Lies <pjzanca@does.it.really.matter.anyway.net> wrote:
> dporter@skyenet.net (Don Porter) wrote:
> >This sounds very laudable, Chris, but isn't that header info fairly easy for 
> >someone to fake? 
> No.  The NNTP-Posting-host: line is pretty tough to trick (IP spoofing
> is one way, I don't know of another) and the Path: line, when viewed
> from more than one recipient site, is also difficult to spoof.

<snort>

All headers except for Path: can be reliably forged if you know what
you are doing. This is because most headers -- Path excluded -- are
checked/fixed/set when the post is injected, not when it travels
through server peerage. So if you can inject a post so it looks like
it is coming from a news peer, you can forge NNTP-Posting-Host
trivially. I do not peer with alt.net, so I can't show you in an
alt.net only group.

Elijah
------
generally uses that technique when injecting newgroups

Technical Details

Message-ID: <eli$9707262035@qz.little-neck.ny.us>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <5pe7hj$st4$0@208.133.29.64> <5pep5f$aro_001@pm1-24.sbinet.com> <33e386f2.339584226@news.alt.net>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f67f3,66ad4247c3a984d,start
X-Google-Attributes: gidf67f3,public
X-Google-Thread: fd665,66ad4247c3a984d,start
X-Google-Attributes: gidfd665,public
From: Eli the Bearded <usenet-tag@qz.little-neck.ny.us>
Subject: Re: ATTN: Chris C
Date: 1997/07/27
Message-ID: <eli$9707262035@qz.little-neck.ny.us>
X-Deja-AN: 259212306
References: <5pe7hj$st4$0@208.133.29.64> <5pep5f$aro_001@pm1-24.sbinet.com> <33e386f2.339584226@news.alt.net>
X-Save-Project-Gutenberg: <URL:http://www.promo.net/pg/nl/pgny_nov96.html>
X-From-Notes: This is sent from a valid but tagged return address. Failure to include an "Re:" in the subject may cause reply mail to bounce.
Organization: Some absurd concept
X-Files: Used for sharpening claws and teeth on your hawk and hacksaw
X-attribution: EtB
X-Acceptable-Email-Policy: for rules about sending mail to this account see: <URL:ftp://ftp.netusa.net/users/eli/email.txt> -- plain text; <URL:http://www.netusa.net/~eli/email.html> -- html format; or <URL:mailto:email-policy@qz.little-neck.ny.us> -- autoresponse
Newsgroups: altnet.general,alt.fan.e-t-b
X-US-Congress: Moronic Fucks.

Reply to Parent Message