[ILUG] Another SPAM question

[Colm Buckley]

Forging the "From" addresses in email is trivial to do; SMTP includes
nothing to prevent it (you can look at solutions like SPF which can help
mitigate the effect of forged From addresses).  Spammers use forged "From"
addresses extensively (http://en.wikipedia.org/wiki/Joe_job), so I doubt
that you need to worry about the security of your system.  Look in the
"Received" headers of the email in question to see which servers it passed
through.  (Note of course that they're forgeable as well, but you will get
an idea at least of whether it originated outside your network).

Colm

On Fri, Jul 31, 2009 at 8:30 AM, Oliver <ollie at eillo.org> wrote:

>
>
>  Hello, Today I got spam email from my server. Or specifically from
> anonymous at .com [1]. The mail was sent to the email address that is listed
> in whois for my server. Is this a situation where the spammer faked the
> sender email (anonymous at .com [2]) knowing that would get through the spam
> check? Or should I be worried? Everytihng is locked down at work so I can
> login to my system. - Ollie
>
> Links:
> ------
> [1]
> mailto:anonymous@<myserver>.com
> [2] mailto:anonymous@<myserver>.com
> --
> Irish Linux Users' Group mailing list
> About this list : http://mail.linux.ie/mailman/listinfo/ilug
> Who we are : http://www.linux.ie/
> Where we are : http://www.linux.ie/map/
>



-- 
Colm Buckley / colm at tuatha.org / +353 87 2469146