[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Backdoor not recognized by Kaspersky



On Wed, 03 Mar 2004 23:36:09 +0530, "Aditya, ALD [Aditya Lalit Deshmukh]" said:

> how about the smtp server simply rejecting mail from spoofed hosts ?

Good.  Now look at the headers for this message and tell me if it's a "spoofed 
host"
or not.  While you're at it, define "spoofed host" more clearly.

Oh... and note that you can't say "it isn't coming from a host that's an MX for
your domain", because many larger mail servers run split inbound and outbound 
servers.

Attachment: pgp00011.pgp
Description: PGP signature