Hi Fabio,
On 2019-09-25 16:41:18, you wrote to me:
That depends where you intercept the messages to get the information.
Is it from the .pkt file or is it already in a message base?
In the between. :)
In HPT you can intercept the single message unpacked from the bundle
before
the delivery to the message base, there you are in GOD MODE [(c) DOOM]
Then you have to figure out how the header is represented in that intercepted message from HPT.
and you can do all that you want with perl scripts.
'perl'!? You're a masochist! ;)
If everything can be forged, your software can't know if some part or
all of the message is forged, so it doesn't have to consider that.
And it's not a consideration to not use the header, instead of other
parts of the message. ;)
You're right, but there should be someting that is injected by the main node to know where the message is originated and not forgeable by a user editor (BBS/Point/JAMNNTPD and so on), do you know about something like this?
Well in an echomail message you have 4 possible sources:
Header
MSGID kludge
Origin line
PATH line
If you don't trust any, you could compare the ones that are present. And if there are inconsistencies report/log/move-to-bad or do whatever you seem appropriate with it. I don't think it's worth it...
Are you sure that the first node of the path can be rewritten?
It's generated on the originating system, so someone that really wants to fiddle with it, could.
The problem with the PATH line is the lack of zone and point fields. And they could have been stripped somewhere along the path. So the first system in the first PATH line doesn't have to be the originating system.
Btw: The header (in a packed message) has the same limitation as the PATH, it doesn't contain the Zone and Point number of the originating system.
Bye, Wilfred.
--- FMail-lnx64 2.1.0.18-B20170815
* Origin: FMail development HQ (2:280/464)