On Mon, 8 Apr 2019 at 18:31, Ntek, SIA Janis <i...@ntek.lv> wrote:

> Thank you for quick responses!
>
> Dominic Raferd's reply was the most helpful and a good how-to :)
>
> Just to summarize, how many From sender spoofing methods are there?
> 1) envelope-sender (What Viktor said)
> 2) Addres in Header From  (What Dominic said)
> 3) Privileged domain in text of *Header From* (What Dominic said)
>

I don't think there is a definitive list because as soon as there is, those
lovely people out there will think of a new way round it.

Here's another type of From header spoof:
From: Dominic Raferd <f...@sender.tld>

Another trick of theirs is to set From Header text in some encoding because
postfix doesn't decode before processing. But spamassassin does.

Reply via email to