Re: Protection against fake mails

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2008-04-09 WALI wrote:
> If we a do a google search for the following string "Send free,
> anonymous and easy fake email", one of the sites we get is
> 'deadfake.com'...and many others. I can send an email to myself from
> myself by filling in the two fields at the website.
>
> Technically, what such sites seems to be doing is that, such mailers
> add an X-Mailer attribute to the message header indicating the message
> origin, and an X-Originating-Ip (a real one).
>
> How do I guard against such emails originating from fake email
> impersonations.

In one word: not.

Does anything stop you from writing arbitrary return addresses on snail
mail? E-mail is no different.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq