Full Disclosure mailing list archives

Re: Backdoor not recognized by Kaspersky


From: Valdis.Kletnieks () vt edu
Date: Thu, 04 Mar 2004 11:43:36 -0500

On Wed, 03 Mar 2004 23:36:09 +0530, "Aditya, ALD [Aditya Lalit Deshmukh]" said:

how about the smtp server simply rejecting mail from spoofed hosts ?

Good.  Now look at the headers for this message and tell me if it's a "spoofed host"
or not.  While you're at it, define "spoofed host" more clearly.

Oh... and note that you can't say "it isn't coming from a host that's an MX for
your domain", because many larger mail servers run split inbound and outbound servers.

Attachment: _bin
Description:


Current thread: