[Mimedefang] Multiple From addresses

Steffen Kaiser skmimedefang at smail.inf.fh-bonn-rhein-sieg.de
Tue Dec 13 08:23:56 EST 2005


today I recieved a SPAM that puzzled me, because it displayed _two_ 
addresses in the From: field. Checking the log that was caused by a 
malformed From: line as the comment part didn't quoted the comma; so  I 
checked RFC822 sec 4.4.1, where the plural is used, hence, it is legal to 
specify multiple From addresses.

However, I grepped all mails I got hands on and found NO single valid mail 
with two From addresses, hence, it's a SPAM indicator; does anyone 
stumbled across a valid mail with multiple From's, perhaps, someone uses 
this "feature" himself?


Steffen Kaiser

More information about the MIMEDefang mailing list