Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.php > #10069 > unrolled thread

PHPMailer from and mesg-id bug

Started byRob van der Putten <rob@sput.nl>
First post2013-07-12 17:41 +0200
Last post2013-07-14 11:47 +0200
Articles 15 — 8 participants

Back to article view | Back to comp.lang.php


Contents

  PHPMailer from and mesg-id bug Rob van der Putten <rob@sput.nl> - 2013-07-12 17:41 +0200
    Re: PHPMailer from and mesg-id bug Michael Vilain <vilain@NOspamcop.net> - 2013-07-12 09:13 -0700
      Re: PHPMailer from and mesg-id bug Rob van der Putten <rob@sput.nl> - 2013-07-12 20:57 +0200
        Re: PHPMailer from and mesg-id bug The Natural Philosopher <tnp@invalid.invalid> - 2013-07-12 21:28 +0100
          Re: PHPMailer from and mesg-id bug Rob van der Putten <rob@sput.nl> - 2013-07-14 10:21 +0200
        Re: PHPMailer from and mesg-id bug Jerry Stuckle <jstucklex@attglobal.net> - 2013-07-12 17:06 -0400
        Re: PHPMailer from and mesg-id bug Christoph Michael Becker <cmbecker69@arcor.de> - 2013-07-13 00:21 +0200
          Re: PHPMailer from and mesg-id bug Rob van der Putten <rob@sput.nl> - 2013-07-14 10:36 +0200
        Re: PHPMailer from and mesg-id bug Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-07-13 01:35 +0200
          Re: PHPMailer from and mesg-id bug Rob van der Putten <rob@sput.nl> - 2013-07-14 10:18 +0200
            Re: PHPMailer from and mesg-id bug Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-07-14 10:50 +0200
              Re: PHPMailer from and mesg-id bug Rob van der Putten <rob@sput.nl> - 2013-07-14 11:46 +0200
                Re: PHPMailer from and mesg-id bug Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2013-07-14 11:54 +0200
        Re: PHPMailer from and mesg-id bug Twayne <nobody@spamcop.net> - 2013-07-13 19:53 -0400
    Re: PHPMailer from and mesg-id bug "Alex vdB" <alex@invalid> - 2013-07-14 11:47 +0200

#10069 — PHPMailer from and mesg-id bug

FromRob van der Putten <rob@sput.nl>
Date2013-07-12 17:41 +0200
SubjectPHPMailer from and mesg-id bug
Message-ID<51e02392$0$15912$e4fe514c@news.xs4all.nl>
Hi there


 From the SMTP rejectlog (UTC + 2);
----------------------------------------------------------------------
2013-07-11 08:45:19 1UxAcw-0006Q0-1N 
H=user-31-174-167-163.play-internet.pl [31.174.167.163]
         F=<rottens46@canaca.com> rejected after DATA:
         Using my domain is identity theft.
Envelope-from: <rottens46@canaca.com>
Envelope-to: <rob@sput.nl>
P Received: from user-31-174-167-163.play-internet.pl ([31.174.167.163])
         by kill-spammers.sput.nl with esmtp (Exim 4.80)
         (envelope-from <rottens46@canaca.com>)
         id 1UxAcw-0006Q0-1N
         for rob@sput.nl; Thu, 11 Jul 2013 08:45:18 +0200
P Received: from apache by sput.nl with local (Exim 4.63)
         (envelope-from <rob@sput.nl>)
         id QJ0U3C-MBGM3Z-19
         for <rob@sput.nl>; Thu, 11 Jul 2013 07:45:16 +0100
T To: <rob@sput.nl>
   Subject: Verdien de som in de hoogte boven of gelijk aan 2000 euro 
per maand door mensen te helpen onder behandeling
tegen billijke prijs gesteld te worden.
   Date: Thu, 11 Jul 2013 07:45:16 +0100
F From: <rob@sput.nl>
I Message-ID: <CCF9944DEB6BF378BD8D8443328B944A@sput.nl>
   X-Priority: 3
   X-Mailer: PHPMailer 5.1 (phpmailer.sourceforge.net)
   MIME-Version: 1.0
   Content-Transfer-Encoding: 7bit
   Content-Type: text/plain; charset="windows-1250"
----------------------------------------------------------------------
2013-07-12 09:58:52 1UxYFf-00006j-LV H=81.61.244.140.dyn.user.ono.com 
[81.61.244.140]
         F=<zanyingncn6@wonderware.com> rejected after DATA:
         Using my domain is identity theft.
Envelope-from: <zanyingncn6@wonderware.com>
Envelope-to: <rob@sput.nl>
P Received: from 81.61.244.140.dyn.user.ono.com ([81.61.244.140])
         by kill-spammers.sput.nl with esmtp (Exim 4.80)
         (envelope-from <zanyingncn6@wonderware.com>)
         id 1UxYFf-00006j-LV
         for rob@sput.nl; Fri, 12 Jul 2013 09:58:51 +0200
P Received: from apache by sput.nl with local (Exim 4.63)
         (envelope-from <rob@sput.nl>)
         id AQLHOZ-LLHV7Z-MV
         for <rob@sput.nl>; Fri, 12 Jul 2013 08:58:50 +0100
T To: <rob@sput.nl>
   Subject: U kunt 200 euro per dag extra verdienen.
   Date: Fri, 12 Jul 2013 08:58:50 +0100
F From: <rob@sput.nl>
I Message-ID: <D8D21D3CA33FCD9FD1BA3A4FB173196A@sput.nl>
   X-Priority: 3
   X-Mailer: PHPMailer 5.1 (phpmailer.sourceforge.net)
   MIME-Version: 1.0
   Content-Transfer-Encoding: 7bit
   Content-Type: text/plain; charset="iso-8859-1"
----------------------------------------------------------------------
2013-07-12 14:40:19 1Uxce2-0003y1-Rk H=lpzg-4db3a770.pool.mediaways.net 
[77.179.167.112]
         F=<reassessmentg1@retela.co.jp> rejected after DATA:
         Using my domain is identity theft.
Envelope-from: <reassessmentg1@retela.co.jp>
Envelope-to: <rob@sput.nl>
P Received: from lpzg-4db3a770.pool.mediaways.net ([77.179.167.112])
         by kill-spammers.sput.nl with esmtp (Exim 4.80)
         (envelope-from <reassessmentg1@retela.co.jp>)
         id 1Uxce2-0003y1-Rk
         for rob@sput.nl; Fri, 12 Jul 2013 14:40:18 +0200
P Received: from apache by sput.nl with local (Exim 4.63)
         (envelope-from <rob@sput.nl>)
         id 63D34I-6FBTHU-HF
         for <rob@sput.nl>; Fri, 12 Jul 2013 13:40:17 +0100
T To: <rob@sput.nl>
   Subject: U kunt meer verdienen! Wij bieden u een persoonlijke oplossing.
   Date: Fri, 12 Jul 2013 13:40:17 +0100
F From: <rob@sput.nl>
I Message-ID: <75296D45910DDE7DC2E1A53BF8E5BBC8@sput.nl>
   X-Priority: 3
   X-Mailer: PHPMailer 5.1 (phpmailer.sourceforge.net)
   MIME-Version: 1.0
   Content-Transfer-Encoding: 7bit
   Content-Type: text/plain; charset="us-ascii"
----------------------------------------------------------------------

In both the 'From; ' and the 'Message-ID: ' the recipient domain instead 
of the sender domain are used. Could this be a PHPMailer bug?


Regards,
Rob
-- 
Don't do anymore PRISM time!
http://prism-break.org/

[toc] | [next] | [standalone]


#10070

FromMichael Vilain <vilain@NOspamcop.net>
Date2013-07-12 09:13 -0700
Message-ID<vilain-C8549E.09131912072013@news.individual.net>
In reply to#10069
In article <51e02392$0$15912$e4fe514c@news.xs4all.nl>,
 Rob van der Putten <rob@sput.nl> wrote:

> Hi there
> 
> 
>  From the SMTP rejectlog (UTC + 2);
> ----------------------------------------------------------------------
> 2013-07-11 08:45:19 1UxAcw-0006Q0-1N 
> H=user-31-174-167-163.play-internet.pl [31.174.167.163]
>          F=<rottens46@canaca.com> rejected after DATA:
>          Using my domain is identity theft.
> Envelope-from: <rottens46@canaca.com>
> Envelope-to: <rob@sput.nl>
> P Received: from user-31-174-167-163.play-internet.pl ([31.174.167.163])
>          by kill-spammers.sput.nl with esmtp (Exim 4.80)
>          (envelope-from <rottens46@canaca.com>)
>          id 1UxAcw-0006Q0-1N
>          for rob@sput.nl; Thu, 11 Jul 2013 08:45:18 +0200
> P Received: from apache by sput.nl with local (Exim 4.63)
>          (envelope-from <rob@sput.nl>)
>          id QJ0U3C-MBGM3Z-19
>          for <rob@sput.nl>; Thu, 11 Jul 2013 07:45:16 +0100
> T To: <rob@sput.nl>
>    Subject: Verdien de som in de hoogte boven of gelijk aan 2000 euro 
> per maand door mensen te helpen onder behandeling
> tegen billijke prijs gesteld te worden.
>    Date: Thu, 11 Jul 2013 07:45:16 +0100
> F From: <rob@sput.nl>
> I Message-ID: <CCF9944DEB6BF378BD8D8443328B944A@sput.nl>
>    X-Priority: 3
>    X-Mailer: PHPMailer 5.1 (phpmailer.sourceforge.net)
>    MIME-Version: 1.0
>    Content-Transfer-Encoding: 7bit
>    Content-Type: text/plain; charset="windows-1250"
> ----------------------------------------------------------------------
> 2013-07-12 09:58:52 1UxYFf-00006j-LV H=81.61.244.140.dyn.user.ono.com 
> [81.61.244.140]
>          F=<zanyingncn6@wonderware.com> rejected after DATA:
>          Using my domain is identity theft.
> Envelope-from: <zanyingncn6@wonderware.com>
> Envelope-to: <rob@sput.nl>
> P Received: from 81.61.244.140.dyn.user.ono.com ([81.61.244.140])
>          by kill-spammers.sput.nl with esmtp (Exim 4.80)
>          (envelope-from <zanyingncn6@wonderware.com>)
>          id 1UxYFf-00006j-LV
>          for rob@sput.nl; Fri, 12 Jul 2013 09:58:51 +0200
> P Received: from apache by sput.nl with local (Exim 4.63)
>          (envelope-from <rob@sput.nl>)
>          id AQLHOZ-LLHV7Z-MV
>          for <rob@sput.nl>; Fri, 12 Jul 2013 08:58:50 +0100
> T To: <rob@sput.nl>
>    Subject: U kunt 200 euro per dag extra verdienen.
>    Date: Fri, 12 Jul 2013 08:58:50 +0100
> F From: <rob@sput.nl>
> I Message-ID: <D8D21D3CA33FCD9FD1BA3A4FB173196A@sput.nl>
>    X-Priority: 3
>    X-Mailer: PHPMailer 5.1 (phpmailer.sourceforge.net)
>    MIME-Version: 1.0
>    Content-Transfer-Encoding: 7bit
>    Content-Type: text/plain; charset="iso-8859-1"
> ----------------------------------------------------------------------
> 2013-07-12 14:40:19 1Uxce2-0003y1-Rk H=lpzg-4db3a770.pool.mediaways.net 
> [77.179.167.112]
>          F=<reassessmentg1@retela.co.jp> rejected after DATA:
>          Using my domain is identity theft.
> Envelope-from: <reassessmentg1@retela.co.jp>
> Envelope-to: <rob@sput.nl>
> P Received: from lpzg-4db3a770.pool.mediaways.net ([77.179.167.112])
>          by kill-spammers.sput.nl with esmtp (Exim 4.80)
>          (envelope-from <reassessmentg1@retela.co.jp>)
>          id 1Uxce2-0003y1-Rk
>          for rob@sput.nl; Fri, 12 Jul 2013 14:40:18 +0200
> P Received: from apache by sput.nl with local (Exim 4.63)
>          (envelope-from <rob@sput.nl>)
>          id 63D34I-6FBTHU-HF
>          for <rob@sput.nl>; Fri, 12 Jul 2013 13:40:17 +0100
> T To: <rob@sput.nl>
>    Subject: U kunt meer verdienen! Wij bieden u een persoonlijke oplossing.
>    Date: Fri, 12 Jul 2013 13:40:17 +0100
> F From: <rob@sput.nl>
> I Message-ID: <75296D45910DDE7DC2E1A53BF8E5BBC8@sput.nl>
>    X-Priority: 3
>    X-Mailer: PHPMailer 5.1 (phpmailer.sourceforge.net)
>    MIME-Version: 1.0
>    Content-Transfer-Encoding: 7bit
>    Content-Type: text/plain; charset="us-ascii"
> ----------------------------------------------------------------------
> 
> In both the 'From; ' and the 'Message-ID: ' the recipient domain instead 
> of the sender domain are used. Could this be a PHPMailer bug?
> 
> 
> Regards,
> Rob

What happens if you construct the message 'by hand'.  E.g. you create 
the message with phpmailer but specify the "From" and "To" headers in 
the body of the message?

What happens if you try this on another ISP?  Sometimes, ISPs do weird 
stuff to prevent SPAMMING.

-- 
DeeDee, don't press that button!  DeeDee!  NO!  Dee...
[I filter all Goggle Groups posts, so any reply may be automatically ignored]

[toc] | [prev] | [next] | [standalone]


#10071

FromRob van der Putten <rob@sput.nl>
Date2013-07-12 20:57 +0200
Message-ID<51e05194$0$15936$e4fe514c@news.xs4all.nl>
In reply to#10070
Hi there


Michael Vilain wrote:

> What happens if you construct the message 'by hand'.  E.g. you create
> the message with phpmailer but specify the "From" and "To" headers in
> the body of the message?

I don't run PHPMailer. I just wondered of this is a known bug.

> What happens if you try this on another ISP?  Sometimes, ISPs do weird
> stuff to prevent SPAMMING.

I listed three. Do you think they all do exactly the same weird thing?


Regards,
Rob
-- 
Don't do anymore PRISM time!
http://prism-break.org/

[toc] | [prev] | [next] | [standalone]


#10072

FromThe Natural Philosopher <tnp@invalid.invalid>
Date2013-07-12 21:28 +0100
Message-ID<krpou5$88f$1@news.albasani.net>
In reply to#10071
On 12/07/13 19:57, Rob van der Putten wrote:
> Hi there
>
>
> Michael Vilain wrote:
>
>> What happens if you construct the message 'by hand'.  E.g. you create
>> the message with phpmailer but specify the "From" and "To" headers in
>> the body of the message?
>
> I don't run PHPMailer. I just wondered of this is a known bug.
>
>> What happens if you try this on another ISP?  Sometimes, ISPs do weird
>> stuff to prevent SPAMMING.
>
> I listed three. Do you think they all do exactly the same weird thing?
>
>
quite possibly.

you are sending to a domain with an envelope from address that it 
considers should not be originating on a remote machine.



> Regards,
> Rob


-- 
Ineptocracy

(in-ep-toc’-ra-cy) – a system of government where the least capable to lead are elected by the least capable of producing, and where the members of society least likely to sustain themselves or succeed, are rewarded with goods and services paid for by the confiscated wealth of a diminishing number of producers.

[toc] | [prev] | [next] | [standalone]


#10085

FromRob van der Putten <rob@sput.nl>
Date2013-07-14 10:21 +0200
Message-ID<51e25f95$0$15899$e4fe514c@news.xs4all.nl>
In reply to#10072
Hi there


The Natural Philosopher wrote:

> quite possibly.
>
> you are sending to a domain with an envelope from address that it
> considers should not be originating on a remote machine.

I'm not sending anything. The log entries are about mail from a remote 
system being rejected. So someone else is trying to send. Not me.


Regards,
Rob
-- 
Don't do anymore PRISM time!
http://prism-break.org/

[toc] | [prev] | [next] | [standalone]


#10073

FromJerry Stuckle <jstucklex@attglobal.net>
Date2013-07-12 17:06 -0400
Message-ID<krpqqb$7if$1@dont-email.me>
In reply to#10071
On 7/12/2013 2:57 PM, Rob van der Putten wrote:
> Hi there
>
>
> Michael Vilain wrote:
>
>> What happens if you construct the message 'by hand'.  E.g. you create
>> the message with phpmailer but specify the "From" and "To" headers in
>> the body of the message?
>
> I don't run PHPMailer. I just wondered of this is a known bug.
>
>> What happens if you try this on another ISP?  Sometimes, ISPs do weird
>> stuff to prevent SPAMMING.
>
> I listed three. Do you think they all do exactly the same weird thing?
>
>
> Regards,
> Rob

Without seeing the source code, it's impossible to determine just what's 
going on.  However, I would expect something wrong (i.e. missing 
information) in the PHP source is causing the MTA's to think they have 
to insert the information.

If this were a problem in PHPMailer, it would have been reported long 
ago.  Too many people are using it (unless you're using a very old 
version, anyway - but even then I doubt it would be PHPMailer).

-- 
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

[toc] | [prev] | [next] | [standalone]


#10074

FromChristoph Michael Becker <cmbecker69@arcor.de>
Date2013-07-13 00:21 +0200
Message-ID<51e08163$0$6573$9b4e6d93@newsspool3.arcor-online.net>
In reply to#10071
Rob van der Putten wrote:

> I don't run PHPMailer. I just wondered of this is a known bug.

The version mentioned as X-Mailer is PHPMailer 5.1.  This is a rather
old version, so well, there may have been a bug (and maybe still is).

However, it does not seem reasonable to conclude that the mails where
sent with PHPMailer at all; inserting a faked X-Mailer header shouldn't
be a problem.  One never knows what spammers are doing...

You may have a closer look at the "P Received" fields.  I'm not
accustomed to the innards of SMTP, but the change of "envelope-from"
particularly regarding the timestamps looks rather strange to me.

-- 
Christoph M. Becker

[toc] | [prev] | [next] | [standalone]


#10086

FromRob van der Putten <rob@sput.nl>
Date2013-07-14 10:36 +0200
Message-ID<51e26319$0$15893$e4fe514c@news.xs4all.nl>
In reply to#10074
Hi there


Christoph Michael Becker wrote:

> The version mentioned as X-Mailer is PHPMailer 5.1.  This is a rather
> old version, so well, there may have been a bug (and maybe still is).
>
> However, it does not seem reasonable to conclude that the mails where
> sent with PHPMailer at all; inserting a faked X-Mailer header shouldn't
> be a problem.  One never knows what spammers are doing...
>
> You may have a closer look at the "P Received" fields.  I'm not
> accustomed to the innards of SMTP, but the change of "envelope-from"
> particularly regarding the timestamps looks rather strange to me.

The timestamps suggest the mail being send from a system west of me. 
However, both the domains and IP addresses are registered in Poland, 
Spain and Germany, which are all the same timezone as me.


Regards,
Rob
-- 
Don't do anymore PRISM time!
http://prism-break.org/

[toc] | [prev] | [next] | [standalone]


#10075

FromThomas 'PointedEars' Lahn <PointedEars@web.de>
Date2013-07-13 01:35 +0200
Message-ID<34354240.TjSlVTRlmr@PointedEars.de>
In reply to#10071
Rob van der Putten wrote:

> Michael Vilain wrote:
>> What happens if you construct the message 'by hand'.  E.g. you create
>> the message with phpmailer but specify the "From" and "To" headers in
>> the body of the message?
> 
> I don't run PHPMailer. I just wondered of this is a known bug.

Unlikely.  As the message is UCE (which by contrast to spam *is* an 
abbreviation), and its content is probably even fraud, it is more likely 
that this is an intentional misuse of PHPMailer, or a misconfiguration of 
the MTA used by it, in a clumsy attempt to prevent the spam message from 
being recognized as coming from a suspicious host.  The underlying 
assumption would be that you do not filter out your own e-mails.

UTSL: <https://github.com/Synchro/PHPMailer/blob/master/class.phpmailer.php>


PointedEars
-- 
Anyone who slaps a 'this page is best viewed with Browser X' label on
a Web page appears to be yearning for the bad old days, before the Web,
when you had very little chance of reading a document written on another
computer, another word processor, or another network. -- Tim Berners-Lee

[toc] | [prev] | [next] | [standalone]


#10084

FromRob van der Putten <rob@sput.nl>
Date2013-07-14 10:18 +0200
Message-ID<51e25ec0$0$15915$e4fe514c@news.xs4all.nl>
In reply to#10075
Hi there



Thomas 'PointedEars' Lahn wrote:

> Unlikely.  As the message is UCE (which by contrast to spam *is* an
> abbreviation), and its content is probably even fraud, it is more likely
> that this is an intentional misuse of PHPMailer, or a misconfiguration of
> the MTA used by it, in a clumsy attempt to prevent the spam message from
> being recognized as coming from a suspicious host.  The underlying
> assumption would be that you do not filter out your own e-mails.

Which would be on the basis of source IP address, not content from or 
mesg-id. So there is no point in faking these.

> UTSL:<https://github.com/Synchro/PHPMailer/blob/master/class.phpmailer.php>


Regards,
Rob
-- 
Don't do anymore PRISM time!
http://prism-break.org/

[toc] | [prev] | [next] | [standalone]


#10087

FromThomas 'PointedEars' Lahn <PointedEars@web.de>
Date2013-07-14 10:50 +0200
Message-ID<1632139.qOB4O6SjbM@PointedEars.de>
In reply to#10084
Rob van der Putten wrote:

> Thomas 'PointedEars' Lahn wrote:
>> Unlikely.  As the message is UCE (which by contrast to spam *is* an
>> abbreviation), and its content is probably even fraud, it is more likely
>> that this is an intentional misuse of PHPMailer, or a misconfiguration of
>> the MTA used by it, in a clumsy attempt to prevent the spam message from
>> being recognized as coming from a suspicious host.  The underlying
>> assumption would be that you do not filter out your own e-mails.
> 
> Which would be on the basis of source IP address, not content from or
> mesg-id.

There could be a rule with your MTA not to reject messages with your From 
header field value or FQDN as used by your MTA as those could be deemed 
trustworthy.

> So there is no point in faking these.

Yes, there is.
 

PointedEars
-- 
var bugRiddenCrashPronePieceOfJunk = (
    navigator.userAgent.indexOf('MSIE 5') != -1
    && navigator.userAgent.indexOf('Mac') != -1
)  // Plone, register_function.js:16

[toc] | [prev] | [next] | [standalone]


#10088

FromRob van der Putten <rob@sput.nl>
Date2013-07-14 11:46 +0200
Message-ID<51e2737e$0$15968$e4fe514c@news.xs4all.nl>
In reply to#10087
Hi there


Thomas 'PointedEars' Lahn wrote:

> There could be a rule with your MTA not to reject messages with your From
> header field value or FQDN as used by your MTA as those could be deemed
> trustworthy.

FQDN yes, header from no. The latter is easily faked. It's just 
something you fill out in your email client config.

> Yes, there is.

How do you fake a FQDN. It's based on IP address (reverse lookup).


Regards,
Rob
-- 
Don't do anymore PRISM time!
http://prism-break.org/

[toc] | [prev] | [next] | [standalone]


#10090

FromThomas 'PointedEars' Lahn <PointedEars@web.de>
Date2013-07-14 11:54 +0200
Message-ID<32711905.8gRmcyD7o3@PointedEars.de>
In reply to#10088
Rob van der Putten wrote:

> Thomas 'PointedEars' Lahn wrote:
>> There could be a rule with your MTA not to reject messages with your From
>> header field value or FQDN as used by your MTA as those could be deemed
>> trustworthy.
> 
> FQDN yes, header from no. The latter is easily faked. It's just
> something you fill out in your email client config.

I am aware of that.
 
>> Yes, there is.
> 
> How do you fake a FQDN. It's based on IP address (reverse lookup).

The “Message-Id” header field value can, in practice, be anything, and can 
be as easily faked as the “From” header field value.  Sometimes it does not 
even contain a FQDN, just some domain-part.

If you wish to further discuss the Internet Message Format, SMTP, and 
UCE/UBE, I suggest you do that in the appropriate newsgroup.  This newsgroup 
is about PHP.


PointedEars
-- 
var bugRiddenCrashPronePieceOfJunk = (
    navigator.userAgent.indexOf('MSIE 5') != -1
    && navigator.userAgent.indexOf('Mac') != -1
)  // Plone, register_function.js:16

[toc] | [prev] | [next] | [standalone]


#10081

FromTwayne <nobody@spamcop.net>
Date2013-07-13 19:53 -0400
Message-ID<krspat$b5b$1@speranza.aioe.org>
In reply to#10071
On 2013-07-12 2:57 PM, Rob van der Putten wrote:
> Hi there
>
>
> Michael Vilain wrote:
>
>> What happens if you construct the message 'by hand'.  E.g. you create
>> the message with phpmailer but specify the "From" and "To" headers in
>> the body of the message?
>
> I don't run PHPMailer. I just wondered of this is a known bug.
>
>> What happens if you try this on another ISP?  Sometimes, ISPs do weird
>> stuff to prevent SPAMMING.
>
> I listed three. Do you think they all do exactly the same weird thing?
>
>
> Regards,
> Rob

I'm no guru but I'm pretty sure there's something else at work there 
besides a bug in the mailer function.

Michael had a valid question which you've ignored. Since you're not 
using it I fail to understand why you're asking this. What good is the 
answer for something you're not using?
    With all due respect, I'd suggest you do more technical research on 
the issue.

Regards,

Twayne`

[toc] | [prev] | [next] | [standalone]


#10089

From"Alex vdB" <alex@invalid>
Date2013-07-14 11:47 +0200
Message-ID<568b6$51e273bc$5468315d$5844@cache50.multikabel.net>
In reply to#10069
"Rob van der Putten" <rob@sput.nl> schreef in bericht 
news:51e02392$0$15912$e4fe514c@news.xs4all.nl...
> Hi there
>
>
> From the SMTP rejectlog (UTC + 2);
> ----------------------------------------------------------------------
> 2013-07-11 08:45:19 1UxAcw-0006Q0-1N 
> H=user-31-174-167-163.play-internet.pl [31.174.167.163]
>         F=<rottens46@canaca.com> rejected after DATA:
>         Using my domain is identity theft.
> Envelope-from: <rottens46@canaca.com>
> Envelope-to: <rob@sput.nl>
> P Received: from user-31-174-167-163.play-internet.pl ([31.174.167.163])
>         by kill-spammers.sput.nl with esmtp (Exim 4.80)
>         (envelope-from <rottens46@canaca.com>)
>         id 1UxAcw-0006Q0-1N
>         for rob@sput.nl; Thu, 11 Jul 2013 08:45:18 +0200

Rob, everything below this is lied together. You cannot trust it. Most 
likely there is no "sput.nl", no "apache", no "exim", and no "PHPMailer 5.1" 
involved.

It does not prove anything, don't bother for looking for bugs in phpmailer, 
exim, apache or your setup. It is just another attempt to circumvent spam 
filters.

> P Received: from apache by sput.nl with local (Exim 4.63)
>         (envelope-from <rob@sput.nl>)
>         id QJ0U3C-MBGM3Z-19
>         for <rob@sput.nl>; Thu, 11 Jul 2013 07:45:16 +0100
> T To: <rob@sput.nl>
>   Subject: Verdien de som in de hoogte boven of gelijk aan 2000 euro per 
> maand door mensen te helpen onder behandeling
> tegen billijke prijs gesteld te worden.
>   Date: Thu, 11 Jul 2013 07:45:16 +0100
> F From: <rob@sput.nl>
> I Message-ID: <CCF9944DEB6BF378BD8D8443328B944A@sput.nl>
>   X-Priority: 3
>   X-Mailer: PHPMailer 5.1 (phpmailer.sourceforge.net)
>   MIME-Version: 1.0
>   Content-Transfer-Encoding: 7bit
>   Content-Type: text/plain; charset="windows-1250"

[toc] | [prev] | [standalone]


Back to top | Article view | comp.lang.php


csiph-web