[Mimedefang] Accuracy of infected IP in mdlog
Jerome Tytgat
jerome.tytgat at asterion.fr
Fri May 14 08:22:59 EDT 2004
hu ?
how do you know about the originating IP adress so ??
I understand that it's surely possible to add received lines
to make believe the sender is someone else, but there's surely
a way to analyze the sanity of received lines, this may be a good thing.
what about making us the choice of choosing what we want to believe ?
using the last received as the good one is not the best at all.
I prefer seeing "xx.yy.zz.cc" is infected rather than 127.0.0.1...
but that's my point of course
David F. Skoll wrote:
> On Fri, 14 May 2004, Jerome Tytgat wrote:
>
>
>>Maybe mimedefang should take care of these Received lines ?
>
>
> Received: lines can be faked.
>
> Regards,
>
> David.
> _______________________________________________
> Visit http://www.mimedefang.org and http://www.canit.ca
> MIMEDefang mailing list
> MIMEDefang at lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>
--
====================================
> Jérôme Tytgat
Administrateur Réseau et Sécurité
ASTERION - Impasse de la Hache
CP 5911 - 44 477 CARQUEFOU CEDEX
T: 02 40 300 800 - F: 02 40 25 10 74
====================================
More information about the MIMEDefang
mailing list