IETF Logo Mail Archive

RE: [Asrg] Some data on the validity of MAIL FROM addresses

"Eric D. Williams" <eric@infobro.com> Wed, 21 May 2003 04:31 UTC

Received: from www1.ietf.org (ietf.org [132.151.1.19] (may be forged)) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA11743 for <asrg-archive@odin.ietf.org>; Wed, 21 May 2003 00:31:07 -0400 (EDT)
Received: (from mailnull@localhost) by www1.ietf.org (8.11.6/8.11.6) id h4L3vjA32214 for asrg-archive@odin.ietf.org; Tue, 20 May 2003 23:57:45 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h4L3vjB32211 for <asrg-web-archive@optimus.ietf.org>; Tue, 20 May 2003 23:57:45 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA11730; Wed, 21 May 2003 00:30:36 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19ILE5-0002xY-00; Wed, 21 May 2003 00:29:17 -0400
Received: from ietf.org ([132.151.1.19] helo=www1.ietf.org) by ietf-mx with esmtp (Exim 4.12) id 19ILDy-0002xU-00; Wed, 21 May 2003 00:29:10 -0400
Received: from www1.ietf.org (localhost.localdomain [127.0.0.1]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h4L3uOB32179; Tue, 20 May 2003 23:56:24 -0400
Received: from ietf.org (odin.ietf.org [132.151.1.176]) by www1.ietf.org (8.11.6/8.11.6) with ESMTP id h4L3piB31979 for <asrg@optimus.ietf.org>; Tue, 20 May 2003 23:51:44 -0400
Received: from ietf-mx (ietf-mx.ietf.org [132.151.6.1]) by ietf.org (8.9.1a/8.9.1a) with ESMTP id AAA11436 for <asrg@ietf.org>; Wed, 21 May 2003 00:24:36 -0400 (EDT)
Received: from ietf-mx ([132.151.6.1]) by ietf-mx with esmtp (Exim 4.12) id 19IL8G-0002vN-00 for asrg@ietf.org; Wed, 21 May 2003 00:23:16 -0400
Received: from black.infobro.com ([63.71.25.39] helo=infobro.com) by ietf-mx with smtp (Exim 4.12) id 19IL8F-0002v5-00 for asrg@ietf.org; Wed, 21 May 2003 00:23:16 -0400
Received: from red (unverified [207.199.136.153]) by infobro.com (EMWAC SMTPRS 0.83) with SMTP id <B0002554206@infobro.com>; Wed, 21 May 2003 00:22:49 -0400
Received: by localhost with Microsoft MAPI; Wed, 21 May 2003 00:23:07 -0400
Message-ID: <01C31F2F.26E9DB10.eric@infobro.com>
From: "Eric D. Williams" <eric@infobro.com>
To: 'Vernon Schryver' <vjs@calcite.rhyolite.com>, "asrg@ietf.org" <asrg@ietf.org>
Subject: RE: [Asrg] Some data on the validity of MAIL FROM addresses
Organization: Information Brokers, Inc.
X-Mailer: Microsoft Internet E-mail/MAPI - 8.0.0.4211
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit
Sender: asrg-admin@ietf.org
Errors-To: asrg-admin@ietf.org
X-BeenThere: asrg@ietf.org
X-Mailman-Version: 2.0.12
Precedence: bulk
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=unsubscribe>
List-Id: Anti-Spam Research Group - IRTF <asrg.ietf.org>
List-Post: <mailto:asrg@ietf.org>
List-Help: <mailto:asrg-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/asrg>, <mailto:asrg-request@ietf.org?subject=subscribe>
List-Archive: <https://www1.ietf.org/pipermail/asrg/>
Date: Tue, 20 May 2003 22:31:23 -0400
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit

On Monday, May 19, 2003 11:48 AM, Vernon Schryver 
[SMTP:vjs@calcite.rhyolite.com] wrote:
8<...>8
>   - some recent spam contains HTTP HREF URLs of the form
>      http://xxx.example.com__foobar
>     Does some HTML-aware MUA treat '__' like '/'?
>
>   - some recent spam contains several purely garbage URLs in HREFs or
>    two valid ones.  They're not even hidden (e.g. <A HREF="asdf"></A>)
>    What's the point of telling spam targets to "click on this" when it
>    is pure garbage?

These two are indeed interesting as they may not be spam at all but probes or 
perhaps even bugs of some sort.  It would be interesting to see whether your 
speculation on the first is true, and whether a BASE reference exists in the 
other.

-e
_______________________________________________
Asrg mailing list
Asrg@ietf.org
https://www1.ietf.org/mailman/listinfo/asrg

v2.31.3 | Report a Bug | By Email | System Status