[kwlug-disc] Email received with no email address in the to: line

Bob Jonkman bjonkman at sobac.com
Mon Apr 10 17:25:11 EDT 2017


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Happens all the time. The To: header doesn't actually determine the
recipient, that's done in the SMTP conversation with RCPT-TO. So, that
makes is easy to spoof To: headers, or omit them altogether.

But there's not enough info to determine how it happened to you. To
analyze that you'd have to provide all the headers in the message
(particularly the Received: headers), and then correlate those to the
logs of the MTAs identified in those Received: headers.

- --Bob.



On 2017-04-10 04:22 PM, Chamunks wrote:
> I'm wondering and if anyone else has had this before. The only
> reason I can think is that Gmail fetched an email from my new email
> server I setup using https://poste.io which is a docker runnable
> complete email solution with a proprietary panel on top of Foss
> software beneath it.
> 
> 
> 
> _______________________________________________ kwlug-disc mailing
> list kwlug-disc at kwlug.org 
> http://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
> 

- -- 


Bob Jonkman <bjonkman at sobac.com>          Phone: +1-519-635-9413
SOBAC Microcomputer Services             http://sobac.com/sobac/
Software   ---   Office & Business Automation   ---   Consulting
GnuPG Fngrprnt:04F7 742B 8F54 C40A E115 26C2 B912 89B0 D2CC E5EA

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Ensure confidentiality, authenticity, non-repudiability

iEYEARECAAYFAljr+C8ACgkQuRKJsNLM5epwBACdGiUKW6PH4v44Zr0s4AgVGL7F
A98AnjtumEs6lFSmx/+BfW+7fNSiwqKO
=N+5B
-----END PGP SIGNATURE-----




More information about the kwlug-disc mailing list