On Monday 15 March 2004 07.31, Steven T. Hatton wrote:
On Monday 15 March 2004 01:24 am, Anders Johansson wrote:
On Monday 15 March 2004 07.22, Steven T. Hatton wrote:
Understood. I'm just wondering /how/ it was pulled of. Is someone tickling the smtp interface with a script?
Too simple, I'm afraid. Simple, unsigned mail are extremely easy to forge and all you need is a telnet client and the mail address of someone who is subscribed to the list to "pull it off".
Where is that address of the subscriber? How was it omitted?
The address of the subscriber is in the envelope of the mail. That is always omitted. It's just that most people choose to have the same address in the text of the mail as in the envelope. The envelope is in the conversation between the sender and suse's list server, in the "MAIL FROM" command. What you see in the actual mail is irrelevant and can be absolutely anything. It's simply not used for anything other than humans to read