of course headers can be faked, but I was using it to illustrate the point that more likely than not, they are coming from a 313 member.
-Joe ----- Original Message ----- From: "Mike Brown" <[EMAIL PROTECTED]> To: ":P" <[EMAIL PROTECTED]> Cc: "scotto" <[EMAIL PROTECTED]>; <313@hyperreal.org>; <[EMAIL PROTECTED]> Sent: Tuesday, July 09, 2002 7:32 PM Subject: Re: [313] w32.klez virus > :P wrote: > > I just got one from: > > > > Return-Path: <[EMAIL PROTECTED]> > > No message from the 313 list to a subscriber will ever have a Return-Path with > that format. It will start with 313-return- followed by the message number > and permutation of the subscriber's email address. > > Any message header can be forged, and email addresses you see in them are > never guaranteed to be accurate. All that matters is the message envelope, > which you don't see much evidence of in the headers at all, except for the > bits of info that each MTA has inserted into the Delivered-To lines when it > accepted the message for delivery. > > - Mike > ____________________________________________________________________________ > mike j. brown | xml/xslt: http://skew.org/xml/ > denver/boulder, colorado, usa | personal: http://hyperreal.org/~mike/ --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
