FORGED EMAIL POSTED TO NANOG

Mailman List Mirror (Read Only)
1

Hi all-
  Someone is having fun tonight, getting 1010WINS, a local radio stations web site to send mail
as me to nanog:

Received: from mail.cbsig.net (mail32.nyc01.cbsig.net [63.240.57.32])
        by segue.merit.edu (Postfix) with SMTP id 441835DD8F
        for <nanog@merit.edu>; Thu, 25 Oct 2001 23:16:14 -0400 (EDT)
Received: (qmail 7985 invoked from network); 26 Oct 2001 03:16:13 -0000
Received: from web145.nyc01.cbsig.net (63.240.56.145)
  by mail02.cbsig.net with SMTP; 26 Oct 2001 03:16:13 -0000

1010WINS is a CBS owned station, and as you can see this email came from cbsig.net, which is NOT me.
Can the mailing list program be fooled by sending mail from a web program like this? Perhaps this should
be looked at. Anyhow, I just wanted to mention I did NOT send this email.

Reid Fishler
Lightning.net

2

1010WINS is a CBS owned station, and as you can see this email came
from cbsig.net, which is NOT me.

no, it's the CBS Internet Group, according to Whois at Network Solutions.

Can the mailing list program be
fooled by sending mail from a web program like this? Perhaps this
should be looked at. Anyhow, I just wanted to mention I did NOT send
this email.

The mailing list could be fooled quite easily, most likely, especially if
it doesn't verify that the addresses given to it are given by the people
who own them.