On Tue, Mar 10, 1998 at 09:49:48AM -0600, Andrew wrote:
What I'd like to do is come up with a recipe that'll detect these. I.e.
count the number of received headers and if there's only one, dump it. If
there's more than one, check to see which ones are just passing through my
local mail servers, and if none remain after eliminating those, dump it.
Bad idea. There are plenty of systems out there that will
strip "Received:" headers for mail that passes through them,
most of them in a misguided attempt to provide security (through
obscurity).
Also, if the mail message originates on a remote machine
that is capable of directly connecting to your primary MX (and
does so), then you'd *legitimately* have only two "Received:"
headers.
Now, if you could find some other signature of RFMS that you
could filter on, that sounds like a winner.
--
Brad Knowles _ _
brad(_at_)colltech(_dot_)com |_| C o l l e c t i v e |_|
http://www.colltech.com |_ technologies _|
"Managing Systems and Networks" [] A Pencom Company []