🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #366

Re: Fake headers on Internet mail

#366
From: Juergen Nickelsen
Date: Thu, 13 Aug 1992 20:17
18 lines
1468 bytes
In article <1992Aug13.164814.11389@aio.jsc.nasa.gov>
Barrett_Jim@ial3.jsc.nasa.gov (Jim Barrett) writes:

> I have observed that some mailer daemons are able to detect certain fraudulent
> transcations, and while accepting the "From:" information in the incoming
> message, will also include an "Apparently-From:" line in the message header. 
> Most mailers that I have played with believe the "From:" information fed to
> them without a murmur of doubt.  

If I remember correctly, an "Apparently-From:" or "Apparently-To:"
header is only inserted when there is no "From:" respectively "To:"
header in the "DATA" part of the mail.

SunOS' sendmail (4.1) only inserts an "Apparently-To:" header in this
case.

--
Juergen Nickelsen
Technical Details
Message-ID: <NICKEL.92Aug13221704@desaster.cs.tu-berlin.de>
Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!Germany.EU.net!news.netmbx.de!zrz.tu-berlin.de!mailgzrz.tu-berlin.de!nickel
References: <1992Aug12.151404.1424@lub001.lamar.edu> <1992Aug13.164814.11389@aio.jsc.nasa.gov>

Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!Germany.EU.net!news.netmbx.de!zrz.tu-berlin.de!mailgzrz.tu-berlin.de!nickel
From: nickel@cs.tu-berlin.de (Juergen Nickelsen)
Subject: Re: Fake headers on Internet mail
In-Reply-To: Barrett_Jim@ial3.jsc.nasa.gov's message of 13 Aug 1992 16:48:14 GMT
Message-ID: <NICKEL.92Aug13221704@desaster.cs.tu-berlin.de>
Lines: 18
Sender: news@mailgzrz.tu-berlin.de (News Manager)
Nntp-Posting-Host: desaster.cs.tu-berlin.de
Reply-To: nickel@cs.tu-berlin.de
Organization: STONE Project, Technical University of Berlin, Germany
References: <1992Aug12.151404.1424@lub001.lamar.edu>
 <1992Aug13.164814.11389@aio.jsc.nasa.gov>
Date: Thu, 13 Aug 1992 20:17:07 GMT