Alon Altman wrote:

On Fri, 26 Sep 2003, Maxim K. wrote:



On Fri, 26 Sep 2003, Nadav Har'El wrote:
maybe "Welcome to Life?" :
I don't understand what is the problem making this with a regular mail.
you can always write the source address whatever you want,
but the stamps will discover which post office really sent the letter.
this is a problem of mailing system.



It does. Look at the "Received:" headers. They list the source IP and the IPs of all the mail servers your message went through.

Alon


Actually:

1. It's possible to add fake "Received" lines so if someone
tries to trace them they might "pass by" your machine move
on to the faked servers and think your machine just forwarded
the message.

2. Last week I was blamed by my ISP that I'm trying to send
spam because apparently my Debian had a world-accessible
Apache mod_proxy (he wasn't aware of that, I found the evidance
in my apache logs), which was used by spammers to "bounce"
SMTP over HTTP proxy (anyone know the exact HTTP stream they
might have used for that?), if this succeeds then it looks like the
spam was originated from the proxy machine.

Conclusion (also mentioned in the mod_proxy docs): DONT ALLOW
WORLD ACCESS TO YOUR PROXY SERVER.

(I don't recall touching mod_proxy, can anyone show me what
a virgin apache config file looks like?)

--Amos



=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]



Reply via email to