Re: VIRUS SPREAD BY MSN DOMAIN??

From: N. Miller (anonymous_at_discussions.microsoft.com)
Date: 10/29/03 

Date: Tue, 28 Oct 2003 20:42:54 -0800

In article <uW5gYWVnDHA.3024@tk2msftngp13.phx.gbl>, lista-nospam@nakawe.se
says...
> This will of course only work if the sender is
> large enough to host their own permanent IP and this corresponds with
> the email-domain.

It will often enough work well enough. Although a mismatch between forward
and reverse domain name lookup isn't proof of intentional spoofing, it is
cause for concern about the source of a message purporting to be from a
large company like Microsoft.

To understand the mismatch I mention, do a forward DNS search on the domain
in my Reply-To: address, then a reverse DNS search on the resulting IP
address. They won't match! ;) 

-- 
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint
Loading