Re: [tlug] mail(): Received (may be forged) question

[Jonathan Q <jq@example.com>]

On Monday 07 April 2003 09:28, Jean-Christian Imbeault wrote:

> Received: from localhost.localdomain (ns.tokyo-av-land.com

I suppose we ought to congratulate you or tease you or something about being 
the first TLUGger to be working on a pr0n-related site (at least that we know 
about) ;-)  But what's all that stuff about "Optimized for IE" and "Flash 
Player and Windows Media Player required?"  Huh huh huh???  :-))

In addition to Sam's analysis, I'd just like to add that neither 
tokyo-av-land.com nor tokyo-avland.com have an MX record:

bash-2.05b$ dig mx tokyo-av-land.com

; <<>> DiG 9.2.1 <<>> mx tokyo-av-land.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35852
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;tokyo-av-land.com.             IN      MX

;; AUTHORITY SECTION:
tokyo-av-land.com.      10404   IN      SOA     dns.tokyo-av-land.com. 
taiyou.mega-bucks.co.jp. 2003022822 21600 3600 1209600 10800

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(localhost)
;; WHEN: Mon Apr  7 12:27:09 2003
;; MSG SIZE  rcvd: 98

bash-2.05b$ dig mx tokyo-avland.com

; <<>> DiG 9.2.1 <<>> mx tokyo-avland.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50268
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;tokyo-avland.com.              IN      MX

;; AUTHORITY SECTION:
tokyo-avland.com.       10408   IN      SOA     dns.tokyo-avland.com. 
taiyou.mega-bucks.co.jp. 2003022822 21600 3600 1209600 10800

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(localhost)
;; WHEN: Mon Apr  7 12:27:14 2003
;; MSG SIZE  rcvd: 97

The most reliable way to handle mail is to have a valid MX record for the 
domains in question and to have correct forward and reverse lookup for those 
domains.  Your MX can also be your outbound SMTP host, and it can just 
re-write everything as being from @example.com (or @example.com, 
if you prefer), and of course, the same box may MX for both domains.

Jonathan
-- 
Jonathan Q
GPG key ID: ACC46EF9 (E52E 8153 8F37 74AF C04D  0714 364F 540E ACC4 6EF9)
To get my public key: gpg --recv-keys --keyserver pgp.mit.edu ACC46EF9

Attachment: pgp00015.pgp
Description: signature