On Wed, Dec 04, 2002 at 09:47:05AM +1100, Brian May wrote: > On Tue, Dec 03, 2002 at 11:09:02AM +0100, Gerrit Pape wrote: > > Autoresponders, bouncers, and other mail handling programs use the > > envelope sender address, not an address found in any header of the mail. > > I doubt that any abuse@ address replies to a bounce message. This is no > > problem. > > You seem to imply that the envelope sender address is harder to forge? > > Yet my experience has been that I can telnet to port 25 on any mail > server, and give it any envelope sender I want. > > Are there suppost to be some sort of checks placed on this address?
He's talking about the envelope sender address on the confirmation messages, which is empty (<>), the same as for bounce messages. --Adam -- Adam McKenna <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
