Re: And so it begins...

On 4/13/2005 9:01 AM, David Gibbs wrote:

>Roger Vicker, CCP wrote:
>  
>
>>Just thought of another problem with the ISP blindly passing everything
>>that comes from their IP range. Ex-employee (or just someone) gets an
>>address close to a commercial customer, sets their mail program to use a
>>from address of the commercial customer and sends a bunch of destructive
>>email. How does anyone, without the audit ablity I have been harping on,
>>prove it didn't come from a current "home worker" of the commercial
>>customer. It didn't come from the commercial customer's server, but it
>>doesn't have to to be legitimate because the ISP says that home workers
>>can't use the commercial customer's server that does use authentication.
>>    
>>
>
>I'm not sure I understand what you are talking about here ... do you
>mean address spoofing?  It's absolutely trivial for me to send email on
>behalf of anyone else.  But if you look at the mail headers it will be
>clear that it didn't come from the company I'm spoofing.
>
>This is no different than an employee stealing letter-head before
>quitting and sending paper mail pretending to represent the company.
>
>
>david
>
>  
>
Yes, I am talking about spoofing. I am not saying that it can't be shown
that it didn't come from the company. Just that non-spoofed address
usage can't be shown to have come from the company either. Because port
25 was blocked it never went through the company's server. And never
went into the company's mail archive either except maybe as a CC.

Blocking port 25 is like saying that you *have* to use the USPS post
office in your neighborhood and can't use FedUpsDhl across town. - Over
simplification. Cheap shot. Poor humor. Bad analogy. <Tongue in cheek>...

Roger

-- 
*** Vicker Programming and Service *** Have bits will byte *** www.vicker.com 
***
The price of greatness is the responsibility.