Well, that's all fine and dandy, but what do we do about
them? Since we know they all have a common element, we need to figure out
a way to stop them using that info.
At 04:03 PM 11/10/2006 +0000, Tony Finch wrote:
They have a forged Received: line which has a "by" field containing the
domain of the recipient address, a "for" field which matches the From:
header, and an "id" field of the form XXXXXX-XXXXXX-XX (similar to Exim's
queue IDs, though Exim IDs are always 1XXXXX-0XXXXX-XX).
Steven Lake
Owner/Technical Writer
Raiden's Realm
www.raiden.net
A friendly web community
