[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Asrg] Re: How would SPF or Sender ID stopped this attack

Bill McInnis wrote: 
Thanks for the reply.

If the IP Address is what is being checked, and I have my own email
server in China that I set up to be US Bank, I know it will not resolve
back to me of course, copy the appropriate IP out of the SPF or Sender
ID record in DNS and release my messages as US Bank, how can it pick
that up?  Wont it just ask DNS if the IP address 123.456.789.123 is the
address of the originating server?

Isn't this the exact scenario they are referring to in the Security
Considerations section?

This 'scenario' involves building a TCP session while using a forged IP address. I don't think anyone has ever claimed to be able to achieve this on the Internet, and it's only become harder in recent years. Even if it were feasible, fixing SMTP to make it impossible would be a minor protocol change.

Philip Miller

_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg