| Re: PHPMailer from and mesg-id bug [message #182139 is a reply to message #182136] |
Sun, 14 July 2013 09:54   |
Thomas 'PointedEars'
Messages: 701
Registered: October 2010
Karma:
|
Senior Member |
|
|
Rob van der Putten wrote:
> Thomas 'PointedEars' Lahn wrote:
>> There could be a rule with your MTA not to reject messages with your From
>> header field value or FQDN as used by your MTA as those could be deemed
>> trustworthy.
>
> FQDN yes, header from no. The latter is easily faked. It's just
> something you fill out in your email client config.
I am aware of that.
>> Yes, there is.
>
> How do you fake a FQDN. It's based on IP address (reverse lookup).
The “Message-Id” header field value can, in practice, be anything, and can
be as easily faked as the “From” header field value. Sometimes it does not
even contain a FQDN, just some domain-part.
If you wish to further discuss the Internet Message Format, SMTP, and
UCE/UBE, I suggest you do that in the appropriate newsgroup. This newsgroup
is about PHP.
PointedEars
--
var bugRiddenCrashPronePieceOfJunk = (
navigator.userAgent.indexOf('MSIE 5') != -1
&& navigator.userAgent.indexOf('Mac') != -1
) // Plone, register_function.js:16
|
|
|
|
Calendar
Search
Help
Members
Register
Login
Home
]