Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
| From | Keith Thompson <kst-u@mib.org> |
|---|---|
| Newsgroups | comp.lang.c |
| Subject | Re: Forged messages:the answer from aioe.org |
| Date | 2015-03-21 16:14 -0700 |
| Organization | None to speak of |
| Message-ID | <87k2yaueml.fsf@kst-u.example.com> (permalink) |
| References | <mebdik$41n$1@speranza.aioe.org> <550df2ef.36697843@news.xs4all.nl> |
raltbos@xs4all.nl (Richard Bos) writes:
> jacob navia <jacob@jacob.<censored>.fr> wrote:
>> That means I was right when I changed my "nospam" address for my real
>> address. At least I can now complain that somebody is using my email
>> address!
>
> True, but I think you have it the wrong way 'round. You should put your
> fake address in your From: header, and your real one in your Reply-To.
> See, for example, my own headers. Both addresses are mine, as should be
> obvious; but they're treated differently.
> The From: header, which is sent in newsgroup header lists and therefore
> easily collected by spammers, goes straight to my spam box. If you send
> a message to it and I see it, you got lucky. This address can safely be
> broadcast all over the 'net; I don't care how much spam I get to it. You
> should put your spamsink.net address there.
> The Reply-To: is only collected when you get the complete message, body
> and all. Spammers rarely bother to get this, which is why it's safer.
> Mail sent to it does get passed through my provider's spam filter, but
> the survivors arrive in my main mail box. This address should _not_,
> please, be put on web sites or displayed in clear; only legitimate mail
> clients should use it. This is where you put your main mail address, and
> that is why I've censored it above.
>
> In short: you have the right solution, but for your spam filter's sanity
> you should swap the two addresses. Unless I'm mistaken and you really
> _do_ use spamsink.net as your main mail host.
I think the point is not spam filters, but how aioe.org will respond to
forged messages. jacob had been using a fake e-mail address in his
posts. Because it's not an address he owns (he won't receive messages
sent there), aioe.org does not officially consider fake messages
appearing to be from that address as forgeries. (This is not to suggest
that the forgeries were in any way legitimate, merely that aioe.org
might not be able to *act* on them.)
aoie.org might be more willing and able to respond to complaints about
forged messages falsely using jacob's legitimate address. They could
track down the IP address used to post them (which they presumably have
in their logs, even though it wasn't included in the forged articles)
and block that address from posting through their servers.
The question is whether aioe.org pays attention to the "To:" header or
the "Reply-To:" header. I have no idea; you'd have to ask them.
--
Keith Thompson (The_Other_Keith) kst-u@mib.org <http://www.ghoti.net/~kst>
Working, but not speaking, for JetHead Development, Inc.
"We must do something. This is something. Therefore, we must do this."
-- Antony Jay and Jonathan Lynn, "Yes Minister"
Back to comp.lang.c | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Forged messages:the answer from aioe.org jacob navia <jacob@jacob.remcomp.fr> - 2015-03-18 09:38 +0100
Re: Forged messages:the answer from aioe.org James Kuyper <jameskuyper@verizon.net> - 2015-03-18 11:07 -0400
Re: Forged messages:the answer from aioe.org Keith Thompson <kst-u@mib.org> - 2015-03-18 09:15 -0700
Re: Forged messages:the answer from aioe.org James Kuyper <jameskuyper@verizon.net> - 2015-03-18 12:54 -0400
Re: Forged messages:the answer from aioe.org Keith Thompson <kst-u@mib.org> - 2015-03-18 10:29 -0700
Re: Forged messages:the answer from aioe.org glen herrmannsfeldt <gah@ugcs.caltech.edu> - 2015-03-18 17:30 +0000
Re: Forged messages:the answer from aioe.org David Brown <david.brown@hesbynett.no> - 2015-03-19 09:04 +0100
Re: Forged messages:the answer from aioe.org Richard Damon <Richard@Damon-Family.org> - 2015-03-19 22:25 -0400
Re: Forged messages:the answer from aioe.org Kaz Kylheku <kaz@kylheku.com> - 2015-03-18 18:22 +0000
Re: Forged messages:the answer from aioe.org asetofsymbols@gmail.com - 2015-03-18 11:41 -0700
Re: Forged messages:the answer from aioe.org asetofsymbols@gmail.com - 2015-03-18 11:41 -0700
Re: Forged messages:the answer from aioe.org asetofsymbols@gmail.com - 2015-03-18 11:41 -0700
Re: Forged messages:the answer from aioe.org Melzzzzz <mel@zzzzz.com> - 2015-03-18 20:28 +0100
Re: Forged messages:the answer from aioe.org Kaz Kylheku <kaz@kylheku.com> - 2015-03-18 19:37 +0000
Re: Forged messages:the answer from aioe.org Melzzzzz <mel@zzzzz.com> - 2015-03-18 23:22 +0100
Re: Forged messages:the answer from aioe.org raltbos@xs4all.nl (Richard Bos) - 2015-03-21 22:48 +0000
Re: Forged messages:the answer from aioe.org raltbos@xs4all.nl (Richard Bos) - 2015-03-21 22:47 +0000
Re: Forged messages:the answer from aioe.org Keith Thompson <kst-u@mib.org> - 2015-03-21 16:14 -0700
Re: Forged messages:the answer from aioe.org raltbos@xs4all.nl (Richard Bos) - 2015-03-30 09:52 +0000
Re: Forged messages:the answer from aioe.org Keith Thompson <kst-u@mib.org> - 2015-03-30 09:14 -0700
csiph-web