🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #372

Re: Fake headers on Internet mail

#372
From: Craig Richmond - division
Date: Fri, 14 Aug 1992 09:22
21 lines
1636 bytes
Barrett_Jim@ial3.jsc.nasa.gov (Jim Barrett) writes:

>I have observed that some mailer daemons are able to detect certain fraudulent
>transcations, and while accepting the "From:" information in the incoming
>message, will also include an "Apparently-From:" line in the message header. 
>Most mailers that I have played with believe the "From:" information fed to
>them without a murmur of doubt.  

The Apparently To: field is generated if you fail to put a Mail header in
the mail body and it has to be salvaged from the envelope information.
Similarly the Apparently From: field is probably placed in the mail if the
envelope information must be used to generate it and can probably be
circumvented by including the information in the Body of the message as
well as the SMTP envelope information.

Craig
--
Craig Richmond.  Computer Officer -  Dept of Economics (morning) 380 3860
  University of Western Australia    Dept of Education (afternoon)
craig@ecel.uwa.edu.au                              Dvorak Keyboards RULE!
     "Only users are allowed to make messes on their computers"  I.M.VI
Technical Details
Message-ID: <1992Aug14.092259.10647@uniwa.uwa.edu.au>
Path: arc1-ca.pugleaf.net!sparky!uunet!munnari.oz.au!uniwa!craig
References: <1992Aug12.151404.1424@lub001.lamar.edu> <1992Aug13.164814.11389@aio.jsc.nasa.gov>

Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!munnari.oz.au!uniwa!craig
From: craig@ec.uwa.oz.au (Craig Richmond - division)
Subject: Re: Fake headers on Internet mail
Message-ID: <1992Aug14.092259.10647@uniwa.uwa.edu.au>
Sender: news@uniwa.uwa.edu.au (USENET News System)
Nntp-Posting-Host: decel.ecel.uwa.edu.au
Organization: University of Western Australia
References: <1992Aug12.151404.1424@lub001.lamar.edu> <1992Aug13.164814.11389@aio.jsc.nasa.gov>
Date: Fri, 14 Aug 1992 09:22:59 GMT
Lines: 21