[Esd-l] problem with SECURITY_NOTIFY_SENDER

John D. Hardin jhardin at impsec.org
Fri Feb 18 13:30:57 PST 2005


On Fri, 18 Feb 2005, [iso-8859-2] Mgr. Michal Nikitinsk} wrote:

> In procmail.log I found:
> NOTICE: Envelope sender domain <domain.com> not supported by
> trusted Received: path. Suppressing sender notification.

This means that <domain.com> did not appear in the local Received:
header in a way that it could be trusted (e.g. derived from a reverse
DNS lookup on the host that sent the email).

This is to prevent sending notifications to obviously forged sender
addresses, for example where the from address is <joe at msn.com> and
the message did not come via an MSN server.

What are the headers from that message?

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org    FALaholic #11174    pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
What nuts do with guns is terrible, certainly. But what evil or crazy
people do with *anything* is not a valid argument for banning that item.
                                  -- John C. Randolph <jcr at idiom.com>
-----------------------------------------------------------------------


More information about the esd-l mailing list