[sdiy] Interesting Email from Jameco -- virus alert

[Tom May]

Glen <mclilith at charter.net> writes:

> At 09:16 AM 8/20/03 , Hermann Seib wrote:
>
> >This neat virus can fake sender addresses, so there's no way to tell (unless
> >you follow the IP addresses) whether it really came from Jameco.
>
> I usually check the "Received:" header for an IP address. Is that header
> forge-proof, or nearly so?

The received headers are added as the message goes through each system
that handles it.  So the recent ones are real, but the oldest ones may
be forged.  For example, this message should say it originated from
whitehouse.gov.

Tom.