Re: Realisticness of header rearrangement

Jose Marcio Martins da Cruz <[email protected]> Tue, 06 Apr 2004 15:11:35 +0200
Newsgroups gmane.ietf.asrg.filtering
Organization Ecole des Mines de Paris
Message-ID <[email protected]>
Bill Yerazunis wrote:
>    From: Laird Breyer <[email protected]>
>
...
> I'm still puzzled.  It seems to me that the simple solution is to 
> work on the assumption that the spammer _CAN_ forge any header;
> they just can't remove headers that are already present.

If they have access to the message, they can.

But the assumption is that the spammer is at the beginning of the flow, 
not at the middle. He will only create initial headers. Is this a too 
strong assumption ?

Another question I'm trying to answer myself : isn't this a more general 
SMTP problem ? Does this kind of problem exist for all other headers or 
is this specific to filters ?

Best

Jose-Marcio


> 



-- 
  ---------------------------------------------------------------
  Jose Marcio MARTINS DA CRUZ           Tel. :(33) 01.40.51.93.41
  Ecole des Mines de Paris              http://j-chkmail.ensmp.fr
  60, bd Saint Michel                http://www.ensmp.fr/~martins
  75272 - PARIS CEDEX 06      mailto:[email protected]