Security Basics mailing list archives

RE: Basically Lazy - Email Header Analysis


From: "David Gillett" <gillettdavid () fhda edu>
Date: Tue, 27 May 2003 08:27:23 -0700

  I like http://spamcop.net.  It analyzes the headers, doing
a good job of detecting forgeries and known open relays, and
automatically looks up the appropriate abuse addresses, although
it's up to you whether you use it to actually send a complaint 
or not.

Dave Gillett

-----Original Message-----
From: Andy Cuff [talisker] [mailto:offthecuff () lineone net]
Sent: October 25, 2003 03:43
To: security-basics () securityfocus com
Subject: Basically Lazy - Email Header Analysis


Hi
Whilst drowning my sorrows in the UK rain following our 
resounding defeat in
the Eurovision song contest (Politics in Europe surely not !!)  I have
turned my attention to email headers.

Whilst I'm quietly confident about manually analysing email 
headers,  I'm
looking for tools or web resources that will automate some of 
the process.
There are plenty of anti-spam resources such as 
http://combat.uxn.com/ and
http://www.spamhaus.org/ to identify spammers and there is 
the infamous Sam
Spade for testing Open Mail Relay Agents. There are a 
plethora of how-to's
and FAQ's about analysing headers manually.   But I haven't found many
resources that analyse the headers in sufficient accurate detail.

Personally I would rather run a tool on my own system than 
put my headers
through a 3rd party website but there are a few sites that 
seem to do it
fairly well such as http://www.3dmail.com/spam/ which whilst 
spam focussed
seems fairly comprehensive, though sadly a beta which hasn't 
been updated in
a year.

Any recommendations websites or tools would be greatly 
appreciated, if there
is a sufficient response I will collate the information onto 
a new page for
the website below and post a summary to this list

cheers, and for the Brits have a good Bank Holiday Weekend I hope the
weather is better where you are!

take care
-andy
Taliskers Network Security Tools
http://www.networkintrusion.co.uk


--------------------------------------------------------------
-------------
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, 
Check Point, 
Hacking & Assessment, Cisco Security, Wireless Security & 
more! Register Now!
--UP TO 30% off classes in select cities-- 
http://www.securityfocus.com/Vigilar-security-basics
--------------------------------------------------------------
--------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: