🚀 go-pugleaf

This is the first time I've posted to News, so please be kind.

I have been informed of a suspected problem in Internet mail by one of my
operators. He received some mail from some valid users at our site, and he
responded to those messages. The people that supposedly sent the messages
claimed they never sent them. Then he (the operator) received e-mail from
himself on a VMS node to his account on our ULTRIX node. He did not send the
mail himself, and he checked the last login time on the account on the VMS node
and found that no one had logged in on that account in quite a while, so he did
not believe anyone figured out his password.

My question is, is there a way to masquerade as someone else in e-mail? If so,
is there anything I can do to prevent this from happening? It seems like they
are changing the header to look exactly like a real mail message from someone
else, and it is very dangerous if someone figures out how to do this. I was
wondering if anyone out there had heard of such a thing.

Please send mail to me personally at the following addresses. I would greatly
appreciate any light you can shed on this.

Thanks.

Kirk Sherer
Lamar University
Beaumont, TX

Internet address:  SHERER@LUB001.LAMAR.EDU
Phone:             (409) 880-2374