> Tom Moulton tmda <tom <at> moulton.us> writes:
>> Because the TO: can be spoofed, the only sure way is to look at
>> the SMTP fields (envelope)
>
> Why does that matter?
>
> Does an attacker gain anything from spoofing the "To:" header instead
> of just actually sending to the address that they'd like?
>
> Forgive me if this is obvious or documented.

If they spoof someone in your white list you will receive the mail

tom


_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to