To LUGNET HomepageTo LUGNET News HomepageTo LUGNET Guide Homepage
 Help on Searching
 
Post new message to lugnet.off-topic.geekOpen lugnet.off-topic.geek in your NNTP NewsreaderTo LUGNET News Traffic PageSign In (Members)
 Off-Topic / Geek / 1917
1916  |  1918
Subject: 
Re: "EarthLink.Net" = spam ?...
Newsgroups: 
lugnet.off-topic.geek
Date: 
Tue, 8 Aug 2000 04:56:36 GMT
Viewed: 
94 times
  
You're right in that the "real" sender's identity
(or at least, sending location) can be traced
via the headers, etc., and I know how to change my options
to see all the headers/trailers/etc.

I can see now how they could fake a return address
and send their spam.  (Thanks.)

But what I can't see is why the protocl doesn't do this:

If receiving a message containing a "From"
that is *NOT* in the domain of the true sender domain,
then:

  a.  "ping"/"finger"/"whois"/[whatever] the "From"
      with the supposed domain;

  b.  If supposed domain denies existence of "From",
      then discard message, else send message onward.

Example: YahooMail (my email server) gets a message
that is supposedly from "hotyoungteens@sexsexsex.earthlink.net".
It notices that the actual email server who initially transmitted
this message was *not* "earthlink.net".  It puts the message
on hold, and sends an inpuiry to "earthlink.net".
"Earthlink.net" sends a reply: we don't know this guy.
YahooMail reroutes the now-discoverd-to-be-fake message
automatically to the bit bucket, and I don't risk another aneurism.
("DAMMIT, if I'd wanted smut, I'd go look for it MYSELF!")

Sure, it would add a little delay to the message's delivery,
but the overall reduction in illegal workload (kill the spam
before it's sent out) would, I think, be more than compensatory.

OTOH, I could be completely in left field...

Thanks,
Franklin



Message has 1 Reply:
  Re: "EarthLink.Net" = spam ?...
 
(...) It's an old protocol, designed before people even thought about problems like this. (...) finger, probably, or the equivalent. One problem with this is that having sites give out information about the existence or nonexistence of given (...) (24 years ago, 8-Aug-00, to lugnet.off-topic.geek)

Message is in Reply To:
  Re: "EarthLink.Net" = spam ?...
 
(...) Earthlink is a very popular isp -- second after AOL. (Or perhaps third after Juno; depends how you count.) So it's very likely that people pick Earthlink as a target for forged addresses. It's also common to see things purporting to come from (...) (24 years ago, 8-Aug-00, to lugnet.off-topic.geek)

5 Messages in This Thread:


Entire Thread on One Page:
Nested:  All | Brief | Compact | Dots
Linear:  All | Brief | Compact

This Message and its Replies on One Page:
Nested:  All | Brief | Compact | Dots
Linear:  All | Brief | Compact
    

Custom Search

©2005 LUGNET. All rights reserved. - hosted by steinbruch.info GbR