Re: Spoofed email

[Muhammad Alkarouri <malkarouri at yahoo dot co dot uk>]

On س, 2004-05-08 at 03:02, Youcef Rabah Rahal wrote:

> Is there a way to check that the SMTP server used to sent the email belongs to 
> the domain name that the 'Sender' field claims to belong to ?

Yes, it is called reverse DNS.

> Such a check should have blocked both the 'cvs' and the 'yahoo' spoofs. You 
> shouldn't be able for example to use your ISP's SMTP server to send emails 
> with @yahoo.com or @arabeyes.org identities.

True.

> I know many users use that (I don't know if Mohammed Sammeer's email on 
> reverse DNS was referring to that method ?), but many spam filters detect 
> that. I remember (when I was first setting my Kmail mailer) that I was trying 
> to email to my @hotmail.com account using my ISP's SMTP server as 
> rahal at arabeyes dot org and it was detected as spam.
> 
> Sorry, but I have no other ideas :)

Your idea is the Right Way (tm) for the problem we are facing. But it
seems that Mohammed Sameer is the only opposition to this. I expect him
to give us better technical reasons that he does that. Using GPG is an
improvement, of course.

Salam,
Muhammad Alkarouri