Re: a question on email headers
-----BEGIN PGP SIGNED MESSAGE-----
On Tue, Apr 15, 2003 at 07:11:50PM +1000, Anders Holmstrom wrote:
> Of course you can (and spammers frequently do) forge a whole Received
> header so you can only rely on the last one (which is the first one from
> the top :-).
No, it's not quite *that* hard to figure out... you can try sending a
test message through a lot of those IPs. If you get connection
refused or it times out, it's probably forged. You can weed out a lot
of the forged headers that way.
.''`. Baloo Ursidae <email@example.com>
: :' : proud Debian admin and user
`- Debian - when you have better things to do than fix a system
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
-----END PGP SIGNATURE-----