Re: Email headers

From: Luigi Grandini (
Date: 02/21/03

  • Next message: Scott Liebergen: "Re: Securing a web server through reverse proxy?"
    Date: Fri, 21 Feb 2003 02:14:42 +0100
    From: Luigi Grandini <>
    To: Marty <>

    There is a lot of documentation on the rfc on the mail header structure.
    Normally in the mail header is write the "sending ip address of the
    mail" doesn't mean obviously it is the real ip ( spoofing / bouncing ).


    Check RFC2505 BCP0030 ( Anti-Spam recommendation for SMTP MTAs ) is a
    nice brefiew of some recomandations.
    Normally i suggest if you have to install a mailserver to take care
    first of the policy to be "forced" to the employes and verify in your
    country if the policy are "law compliant" cause in a lot of cases i saw
    that virus are sent from the users you got ( this is common in italy
    were a lot of company don't have an antivirus installed on their
    network ).

    At disposition.


    Luigi Grandini
    IT Security Evangelist

    ----- Original Message -----
    From: Marty <>
    Date: Thursday, February 20, 2003 7:32 pm
    Subject: Email headers

    > Hi group,
    > Could someone explain how to decipher Email header? How can we
    > know the
    > real sender of spam or virus email?
    > Thanks,
    > Marty