Home page logo
/

basics logo Security Basics mailing list archives

Re: Protection against fake mails
From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Wed, 9 Apr 2008 21:03:47 +0200

On 2008-04-09 WALI wrote:
If we a do a google search for the following string "Send free,
anonymous and easy fake email", one of the sites we get is
'deadfake.com'...and many others. I can send an email to myself from
myself by filling in the two fields at the website.

Technically, what such sites seems to be doing is that, such mailers
add an X-Mailer attribute to the message header indicating the message
origin, and an X-Originating-Ip (a real one).

How do I guard against such emails originating from fake email
impersonations.

In one word: not.

Does anything stop you from writing arbitrary return addresses on snail
mail? E-mail is no different.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault