www.CostaRicaTicas.com
https://forum.costaricaticas.com/

Any IT people who can help me out
https://forum.costaricaticas.com/viewtopic.php?f=1&t=28618		 Page 1 of 1
Author:  Patriot [ Wed May 13, 2009 6:11 pm ]
Post subject:  Any IT people who can help me out
I've been receiving emails from CR, mostly SPAM, but they caught my interest as they are not for real estate. I have not responded to any of them as they are probably phishing or generating mailing addresses.

I looked at the headers and they seem to be originating from both San Jose and Liberia.

My questions are:
How reliable is the "X-Originating-IP" part of the header ?? This includes reliable emails from known contacts.

In other words if the IP is traced and the geolocation shows CR, should I trust it or may it just be a re-routing of the actual IP address ??
Author:  Xpatriot [ Wed May 13, 2009 6:35 pm ]
Post subject: 
Depending on the skill of the sender the email header can be easily forged. If they are not skilled then all they have to do is remotely telnet into any CR server and send from there no matter where in the world they are actually sitting. If they have even rudimentary programming skills they could also accomplish the same thing.

On the other hand with the right skills and the right tools they can be accurately traced. I always say that no matter how smart you think you are .... there is someone on the other side who is smarter.

=xp=
Author:  Spanky [ Wed May 13, 2009 6:53 pm ]
Post subject: 
Usually the originating IP address in the header record is pretty reliable. It can be forged if you are good but most spammers don't really care.
Author:  ZeeBraWon [ Wed May 13, 2009 11:29 pm ]
Post subject: 
First, you need to know that spammers/scammers and con artists are simply moving their practices to the digital age.

Second, you can trust absolutely nothing that you have no control over. If I drop a letter in your mailbox, it may be completely forged, both the header and the contents. Without encrypted emails, non-repudiated and mutual authentication, email is simply a crap shoot these days.

Third, I can completely forge my own IP, in real time, and appear that I'm sending emails from Germany, West Madagascar Province or Newark, NJ. Don't matter - it's all possible. And real. And easy.

best option? Call them up via voice. Humans are great Turing detectors.

:)
Author:  Junky11 [ Thu May 14, 2009 5:04 pm ]
Post subject: 
1+ Spanky
Author:  J0sie [ Thu May 14, 2009 5:54 pm ]
Post subject: 
Junky11 wrote:
1+ Spanky


Actually -3 for Spanky. Because I know he knows better the answer should had been;

1 – A simple, NO you cannot trust any IP. If we could every Security expert would be out of a job overnight. IP address can be spoof, modify and just plain re-routed to do anything you want it to do. My 10 year old nephew just do it to download music.

2 – Spammers do not use their own machine to send mail. The IP could be generated in CR but the spammer could be sitting in Russia drinking vodka while draining your checking account.

3 – Google zombie computer
Page 1 of 1 All times are UTC - 5 hours [ DST ]
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/