Forged Received line?1997-08-22 21:36:11Received: from fake_source (true_source [111.111.111.111]) by .... Can a header be in this format and not be spam? How would one write the conditions to detect this format AND detect that fake_source does not equal true_source ? * ^Received:[ ]*from ????? (????? [ * ! $????? == $?????
|
|
||||||||||||||||