On Mon, 8 Jan 2001 16:50:31 -0500 (EST)
John R Levine <[EMAIL PROTECTED]> wrote:
> In this particular case, the From: line is the only one that makes
> sense to test. You don't care where the mail was injected into
> SMTP, you care whether it's a KLM address or some other
> organization, and the sender's domain tells you that.
Given that the From: header is untrustworthy it would seem smarter
to check on the envelope, which while also untrsutworthy, is less so
(most/all mail clients can forge From: headers, fewer can forge
envelopes).
> Majordomo responds to the address on the From: line, after all.
So check both.
--
J C Lawrence [EMAIL PROTECTED]
---------(*) http://www.kanga.nu/~claw/
--=| A man is as sane as he is dangerous to his environment |=--
