Re: [Exim] rbl-check for forwarded spam

Top Page
Delete this message
Reply to this message
Author: Marc Haber
Date:  
To: exim-users
Subject: Re: [Exim] rbl-check for forwarded spam
On Mon, 7 Apr 2003 12:44:07 -0400 (EDT), Richard Welty
<rwelty@???> wrote:
>On Mon, 7 Apr 2003 12:28:18 -0400 Ken Olum <kdo@???> wrote:
>> I'm thinking of trying to use Bjarni Einarsson's rbl-check system
>> (http://bre.klaki.net/programs/spam/rbl-check.pl.txt) that checks for
>> blacklisted sites in Received: headers. Since it's in perl, I thought
>> I might be able to run it with the embedded perl facility.
>
>trusting received: headers is pretty risky. the received headers in much
>(most?) spam these days include a lot of forgery. about the only one you
>can really trust is the one your own MTA generates.


If I were behind a dial-up line, and would receive my e-mail via UUCP,
POP3 or a mail gate, I'd trust the received headers written by the MX.

Which is pretty much what is needed to allow dnsbl checking.

Greetings
Marc

--
-------------------------------------- !! No courtesy copies, please !! -----
Marc Haber          |   " Questions are the         | Mailadresse im Header
Karlsruhe, Germany  |     Beginning of Wisdom "     | Fon: *49 721 966 32 15
Nordisch by Nature  | Lt. Worf, TNG "Rightful Heir" | Fax: *49 721 966 31 29