From mboxrd@z Thu Jan  1 00:00:00 1970
X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/46031
Path: main.gmane.org!not-for-mail
From: prj@po.cwru.edu (Paul Jarc)
Newsgroups: gmane.emacs.gnus.general
Subject: Re: TMDA (was: new spam functionality added)
Date: Tue, 06 Aug 2002 12:02:19 -0400
Organization: What did you have in mind?  A short, blunt, human pyramid?
Sender: owner-ding@hpc.uh.edu
Message-ID: <m3ado0nffi.fsf@multivac.cwru.edu>
References: <m3lm7rya31.fsf@onyx.nimbus.northernlight.com>
	<oydy9br1xnb.fsf@sam.cs.rice.edu>
	<ilu3ctz8xja.fsf@latte.josefsson.org>
	<87y9brejam.fsf@mail.paradoxical.net>
	<oydu1mf4oxi.fsf@sam.cs.rice.edu>
	<873ctztyth.fsf@mail.paradoxical.net>
	<oyd8z3r4nec.fsf@sam.cs.rice.edu>
	<hhlm7qf22b.fsf@nightshade.la.mastaler.com>
	<yly9bqexie.fsf@windlord.stanford.edu>
	<20020801222925.A10502@mastaler.com>
	<ylbs8lg9ou.fsf@windlord.stanford.edu>
	<m3vg6tqlo9.fsf_-_@multivac.cwru.edu>
	<rjit2pkxz4.fsf@zuse.dina.kvl.dk> <m3sn1tp54j.fsf@multivac.cwru.edu>
	<02Aug5.143835edt.119445@gateway.intersystems.com>
	<uit2puj8m.fsf@synopsys.com>
	<02Aug5.174118edt.119294@gateway.intersystems.com>
	<m2fzxsoecr.fsf@m198-149.dsl.rawbw.com>
NNTP-Posting-Host: localhost.gmane.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Trace: main.gmane.org 1028649775 20849 127.0.0.1 (6 Aug 2002 16:02:55 GMT)
X-Complaints-To: usenet@main.gmane.org
NNTP-Posting-Date: Tue, 6 Aug 2002 16:02:55 +0000 (UTC)
Return-path: <owner-ding@hpc.uh.edu>
Original-Received: from malifon.math.uh.edu ([129.7.128.13])
	by main.gmane.org with esmtp (Exim 3.35 #1 (Debian))
	id 17c6nO-0005Q3-00
	for <ding-account@gmane.org>; Tue, 06 Aug 2002 18:02:54 +0200
Original-Received: from sina.hpc.uh.edu ([129.7.128.10] ident=lists)
	by malifon.math.uh.edu with esmtp (Exim 3.20 #1)
	id 17c6nD-0003Lf-00; Tue, 06 Aug 2002 11:02:43 -0500
Original-Received: by sina.hpc.uh.edu (TLB v0.09a (1.20 tibbs 1996/10/09 22:03:07)); Tue, 06 Aug 2002 11:03:11 -0500 (CDT)
Original-Received: from sclp3.sclp.com (qmailr@sclp3.sclp.com [209.196.61.66])
	by sina.hpc.uh.edu (8.9.3/8.9.3) with SMTP id LAA23002
	for <ding@hpc.uh.edu>; Tue, 6 Aug 2002 11:02:55 -0500 (CDT)
Original-Received: (qmail 18096 invoked by alias); 6 Aug 2002 16:02:22 -0000
Original-Received: (qmail 18091 invoked from network); 6 Aug 2002 16:02:22 -0000
Original-Received: from multivac.student.cwru.edu (HELO multivac.cwru.edu) (@129.22.96.25)
  by gnus.org with SMTP; 6 Aug 2002 16:02:22 -0000
Original-Received: (qmail 9761 invoked by uid 500); 6 Aug 2002 16:02:41 -0000
Original-To: ding@gnus.org
In-Reply-To: <m2fzxsoecr.fsf@m198-149.dsl.rawbw.com> (David Masterson's
 message of "05 Aug 2002 20:28:20 -0700")
Mail-Copies-To: nobody
Mail-Followup-To: ding@gnus.org
Original-Lines: 19
User-Agent: Gnus/5.090008 (Oort Gnus v0.08) Emacs/21.2 (i686-pc-linux-gnu)
Precedence: list
X-Majordomo: 1.94.jlt7
Xref: main.gmane.org gmane.emacs.gnus.general:46031
X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:46031

David Masterson <dsm@rawbw.com> wrote:
> In the TMDA scenario, spammers now have to put some sort of (TBD)
> auto-confirmer into place to "get the spam through".

Or abuse a compromised system - but those will always be a problem
anyway.

> This means that the "From" or "Reply-to" address on their email now
> has to be valid so that TMDA can send confirmation email to their
> auto-confirmer.

Actually, it's the envelope sender, which may or may not be easy for
the recipient to look at, depending on all the software standing
between them and their mail.  Usually it's not too hard to get at if
you want it, I think, but you do have to know that that's what you're
looking for.  Header fields can still be forged.


paul