NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Filtering incoming SMTP "from" your domain via SS



> "Coleman, Clayton" wrote:
>
> You were correct in saying we want to prevent spammers from dumping things into our net and have them appear to be from our net.  In one example:
> Let's say someone sitting on their home dialup does this to our Internet SMTP server:
> MAIL FROM: [email protected]
> RCPT TO: [email protected]
> DATA
> Hey baby, let's hook up.
> .
>
> We don't want that to happen...  We would want the firewall to say "hey, since foxboro.com is internal, it can't be the source!"
>
> I'm trying to determine what things could go wrong and could the security service have a problem doing it...
>
> Clayton

It still doesn't help you here. Remember the "From:" line in the header
and the SMTP sender ("Return-Path" or "MAIL FROM:") need not have anything
to do with each other. I can still send a mail,

MAIL FROM:<>
RCPT TO:<[email protected]>
DATA
From: [email protected]
To: [email protected]

Hey baby, let's hook up.
.
QUIT

And to "secretary," it still looks like it came from "president." I really
99% of users for that matter would be able to find the difference between
mine and yours and even understand what it means.
--
Crist J. Clark                               [email protected]
Globalstar CommunicationsThe information contained in this e-mail message is confidential,
intended only for the use of the individual or entity named above.
If the reader of this e-mail is not the intended recipient, or the
employee or agent responsible to deliver it to the intended recipient,
you are hereby notified that any review, dissemination, distribution or
copying of this communication is strictly prohibited.  If you have
received this e-mail in error, please contact [email protected]

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.