postfix-users March 2011 archive
Main Archive Page > Month Archives  > postfix-users archives
postfix-users: Re: SMTP client host name spoofing

Re: SMTP client host name spoofing

From: Wietse Venema <wietse_at_nospam>
Date: Thu Mar 31 2011 - 16:42:18 GMT
To: Postfix users <postfix-users@postfix.org>

Stan Hoeppner:
> Received: from mail-iw0-f176.google.com (biz88.inmotionhosting.com
> [66.117.14.32])
> by greer.hardwarefreak.com (Postfix) with ESMTP id F297D6C12E
> for <stan@hardwarefreak.com>; Thu, 31 Mar 2011 06:29:19 -0500
>

The format is:

    Received: from helo-hostname (verified-reverse-name [ip-address])

This is also useful when setting up backscatter filters: all mail with
a helo-hostname of "porcupine.org", "postfix.org", etc. is a forgery.

        Wietse