On Mon, Oct 06, 2003 at 10:55:12AM -0400, RKML wrote:
| eBay forges the From address. Here is a sample header I used to test with.
This is pure forgery. Therefore, eBay will be broken after July 4th 2004 if
they elect not to fix this issue.
they will have to do some kind of sender rewriting.
besides, there are already many MTAs that will reject mail that purports
to be the local domain, if the mail is coming from outside. this is
broken, yes, but it shows how desperate people are.
this sort of thing may break sooner than july 4th since that's only a
recommended softdeny->deny date; it's up to cyberglobe.net to announce
SPF policy.
| Return-path: <auctions(_at_)cyberglobe(_dot_)net>
| X-Reverse-Lookup: by ms-rrdns (v0.6); Found 4 IPs: Good=3 Bad=0 Private=1
| 66.193.107.30 = 66-193-107-30.gen.twtelecom.net
| 66.193.107.95 = 66-193-107-95.gen.twtelecom.net
| 66.135.197.13 = mxpool07.ebay.com
| 10.6.61.30 = Private.Block[RFC-1918]
| Received: from smtp30.newbytes.net (66-193-107-30.gen.twtelecom.net
[66.193.107.30]) by cyberglobe.net
| (Rockliffe SMTPRA 5.2.5) with ESMTP id
<B0013031335(_at_)www(_dot_)cyberglobe(_dot_)net> for
<auctions(_at_)cyberglobe(_dot_)net>;
| Sun, 5 Oct 2003 12:40:51 -0400
| Received: from mx5.newbytes.net ([66.193.107.95])
| by smtp30.newbytes.net with esmtp (SpamSlayer 3.0)
| id 1A6BsP-000KsD-02
| for auctions(_at_)cyberglobe(_dot_)net; Sun, 05 Oct 2003 09:36:57 -0700
| Received: from mxpool07.ebay.com ([66.135.197.13] helo=mx13.sjc.ebay.com)
| by mx5.newbytes.net with esmtp (SpamSlayer 2.0)
| id 1A6Bs3-0006EA-00
| for auctions(_at_)cyberglobe(_dot_)net; Sun, 05 Oct 2003 09:36:35 -0700
| Received: from cellphone.sjc.ebay.com (cellphone.sjc.ebay.com [10.6.61.30])
| by mx13.sjc.ebay.com (8.12.3/8.12.3) with SMTP id h95GaP01012220
| for <auctions(_at_)cyberglobe(_dot_)net>; Sun, 5 Oct 2003 09:36:25 -0700
| Message-Id:
<200310051636(_dot_)h95GaP01012220(_at_)mx13(_dot_)sjc(_dot_)ebay(_dot_)com>
| To: auctions(_at_)cyberglobe(_dot_)net
| From: auctions(_at_)cyberglobe(_dot_)net
-------
Sender Permitted From: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
To unsubscribe, change your address, or temporarily deactivate your
subscription,
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡