"Forging" mail addresses

[fishkake]

Hello, this is not a suspect post as you ay think!

Here's the deal - we just downloaded a trial of iSheriff, a spam engine which gets rid of nasty emails and viruses etc. and we're trying to test it. Currently I'm testing it using the live, corporate mail server to send mail through iSheriff to another, test mail server.

What I want to know is, with full control over all the servers, can I forge a "From" address? I want to send email "From" a known spam site, and see if the spam engine stops it.

Any ideas welcome, exchange is not ENTIRELY necessary if somebody knows how to do this with another (freeware or free trial) mail server.

 

[PScottC]

Here's the quick and easy method for testing...

Use Outlook Express. Configure it to use your Spam filter for outbound SMTP and your exchange server for POP3. Set your email address and reply address to the "known spammer" address. Send an email to yourself.

You can also use telnet to do it, but it's quite a bit harder unless you're comfortable with command line.

Or you can google "SMTP server" and use one of the freeware spammer applications.

I typically use Netscan Tools to do SMTP testing, but that requires you to buy something.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[lgarner]

Telnet's the quick and dirty way to do it.

telnet server 25
helo whatever.com
mail from: <spammer@spam.net>
rcpt to: <inside_user@yourcompany.com>
data
subject: Enjoy this spam
Here's a spam message
.
quit

Just substitute your Exchange server IP for "server" and you're off.