List Info

Thread: Re: Challenge-Response - determining if bounces originated from here
Re: Challenge-Response - determining if bounces originated from here
country flaguser name
United States		 2008-04-25 14:32:23 

  


  

    

Richard, 


On a previous mail server, we used to putt extra 
headers in emails, however EVERYTHING in an email can be faked-- except for the 
IP that the email is coming from.


If your server sent an email out, then it will show a 
Received line for your server, and beneath it a Received line for your 
customer's IP.


Surgemail is already smart enough to determine 
"bouced.  Email did not originate from here."


... as in  g_vanish_bad_bounces
========== Log File (rec0804/msg080424.rec) ===========
24 05:51:14[805019] Dropped 62.112.193.140 <> <bob 1usa.com&gt; 2616 <Tf1ImxoKY00038f00mail.adecco.hu> "[mail.adecco.hu] g_vanish_bad_bounces bounce of message not originally from here"
24 06:31:56[805148] Dropped 217.71.118.161 <> <bob 1usa.com&gt; 6056 <1209033113_2605male> "[brussels1.firstlinknetworks.com] g_vanish_bad_bounces bounce of message not originally from here"
24 13:18:57[807811] Dropped 64.12.136.130 <> <bob 1usa.com&gt; 3992 <200804241718.m3OHI523031762rly-mg02.mx.aol.com&gt; "[omr-m22.mx.aol.com] g_vanish_bad_bounces bounce of message not originally from here"
24 13:24:40[807847] Dropped 205.188.249.69 <> <bob 1usa.com&gt; 3985 <200804241724.m3OHNwDd008077rly-mg10.mx.aol.com&gt; "[omr-d25.mx.aol.com] g_vanish_bad_bounces bounce of message not originally from here"
24 16:41:47[809323] Dropped 206.163.83.51 <> <bob windsorpress.com> 2681 <20080424114128.4543.qmailrr-s99yenw9mwl5> "[mail.wschiro.edu] g_vanish_bad_bounces bounce of message not originally from here"
24 19:27:10[810077] Dropped 63.240.76.56 <> <bob 1usa.com&gt; 14816 <20080424232655s17001cs00esccrmxc17.comcast.net> "[sccrmxc17.comcast.net] g_vanish_bad_bounces bounce of message not originally from here"



BarryZ


 


 


----- Original Message ----- 



Sent: Thursday, April 24, 2008 9:33 PM


Subject: Re: [SurgeMail List] Challenge-Response




Hi all,


In terms of generating and dealing with 
backscatter, could we get (or  
do we already have, there are so many 
options it's possible) a  
verification header that could be used to 
check whether an email was  
sent through that server or 
not?

Here's one that we use with our sendmail boxes for 
example.
<http://www.snertsoft.com/sendmail/milter-null/>

Similar 
options in SM would be 
great.


cheers,
Richard


  

  
  
   
     
    

  

    Re:  Challenge-Response - determining if
bounces originated from here
  


  

     country flaguser name
United States		
     2008-04-25 15:09:07
  


  

    
On 26/04/2008, at 5:32 AM, <webmaster1usa.com> wrote:
> On a previous mail server, we used to putt extra
headers in emails,  
> however EVERYTHING in an email can be faked-- except
for the IP that  
> the email is coming from.


milter-null uses a 32 char generated hash which is fairly
complex and  
very hard to fake, a combination of a secret password +
email address  
+ date + time + md5 (or similar, that's from memory).


cheers,
Richard




  


  

    
  

  
  
   
     
    






 [1-2]











   
 





about | contact  Other archives ( Real Estate discussion Medical topics )