Re: So much for "Message ID really can't be faked"

Me neither....however, I am puzzled how a Message ID would be valid 
between or beyond one Email SMTP transaction?

I thought message ID headers were construction at the time of the SMTP 
transaction between two mail hubs, generated by origin.

-gc

David Hoffman wrote:
> Not sure I understand the problem.
>  
> Are you using the Message-ID in your rules to allow incoming mail to 
> pass without being challenged?
>  
>
>
>  
> ----- Original Message ----
> From: Adam Todd <[email protected]>
> To: [email protected]
> Sent: Monday, January 15, 2007 8:56:46 AM
> Subject: So much for "Message ID really can't be faked"
>
> Ergh.
>
> So much for the "Message ID can't be faked" theory that often promotes
> better structure in Spam filters.
>
> I can't say I've seen it before but tonight I got one:
>
> Message-ID: <[email protected]>
>
>
> <sigh> Here are the headers for interest.  I changed "mydomain" for 
> obvious
> reasons.  But harvesters aren't as intelligent as humans :)  Right ;)
>
> If anyone has a TMDA rule to catch the below, I suspect it might be very
> useful this year.  I can see this is JUST the beginning of this kind of
> fraud header, having not personally seen (or noticed) it before.
>
>
> Return-Path: <[email protected]>
> Received: from llsb600-a02.servidoresdns.net 
> (llsb600-a02.servidoresdns.net
> [82.223.190.40])
>     by fep1.ah.net (8.12.11/8.12.11) with ESMTP id l0FBkCUj006050
>     for <adam@mydomain>; Mon, 15 Jan 2007 22:46:13 +1100
> Received: from 179.Red-81-45-246.staticIP.rima-tde.net
> (179.Red-81-45-246.staticIP.rima-tde.net [81.45.246.179])
>     by smtp-02.servidoresdns.net (Postfix) with SMTP id 4FF6D3EB74
>     for <adam@mydomain>; Mon, 15 Jan 2007 12:46:06 +0100 (CET)
> X-Original-To: adam@mydomain
> Delivered-To: adam@mydomain
> Received: from [81.45.246.179] (port=46566
> helo=179.Red-81-45-246.staticIP.rima-tde.net)
>          by fep1.ah.net with esmtp
>          id 756032-756032-08
>          for adam@mydomain; Mon, 15 Jan 2007 12:42:50 +0100 (EET)
> Message-ID: <[email protected]>
> From: "Marcie" <[email protected]>
> To: "Dillon" <adam@mydomain>
> Subject: cellular
> Date: Mon, 15 Jan 2007 12:42:50 +0100 (EET)
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
>     boundary="----=_NextPart_001_4EBD_01C7389A.48E191D0"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2900.2180
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>
> _____________________________________________
> tmda-users mailing list ([email protected])
> http://tmda.net/lists/listinfo/tmda-users
>
>
> ------------------------------------------------------------------------
> Finding fabulous fares is fun.
> Let Yahoo! FareChase search your favorite travel sites 
> <http://farechase.yahoo.com/promo-generic-14795097;_ylc=X3oDMTFtNW45amVpBF9TAzk3NDA3NTg5BF9zAzI3MTk0ODEEcG9zAzEEc2VjA21haWx0YWdsaW5lBHNsawNxMS0wNw--> 
> to find flight and hotel bargains.
> ------------------------------------------------------------------------
>
> _____________________________________________
> tmda-users mailing list ([email protected])
> http://tmda.net/lists/listinfo/tmda-users