Let's send an email

How did it come out?

Delivered-To: jas404@cwru.edu
Received: by 10.42.218.69 with SMTP id hp5cs350434icb;
        Tue, 22 Feb 2011 21:38:08 -0800 (PST)
Received: by 10.229.95.4 with SMTP id b4mr2709086qcn.86.1298439487929;
        Tue, 22 Feb 2011 21:38:07 -0800 (PST)
Received: from mpv5.TIS.cwru.edu (mpv5.tis.CWRU.Edu [129.22.105.51])
        by mx.google.com with ESMTPS id i34si14462085qck.68.2011.02.22.21.38.07
        (version=TLSv1/SSLv3 cipher=OTHER);
        Tue, 22 Feb 2011 21:38:07 -0800 (PST)
Received-SPF: softfail (google.com: domain of transitioning carol@case.edu does not designate 129.22.169.103 as permitted sender) client-ip=129.22.169.103;
Received: from zinfandel.case.edu (zinfandel.STUDENT.CWRU.Edu [129.22.169.103])
        by mpv5.TIS.cwru.edu (MOS 3.10.9-GA)
        with ESMTP id FFR95687
        for <dave@case.edu>;
        Wed, 23 Feb 2011 00:37:56 -0500 (EST)
Date: Wed, 23 Feb 2011 00:37:36 -0500 (EST)
From: <carol@case.edu>
Message-Id: <201102230537.FFR95687@mpv5.TIS.cwru.edu>

Test Alpha

Redo...

Sample 2: Results

Sample 2: Behind the scenes

Delivered-To: alice@code406.com
Received: by 10.204.10.85 with SMTP id o21cs309307bko;
        Tue, 22 Feb 2011 22:16:05 -0800 (PST)
Received: by 10.224.67.67 with SMTP id q3mr3041236qai.171.1298441765156;
        Tue, 22 Feb 2011 22:16:05 -0800 (PST)
Return-Path: <carol@case.edu>
Received: from mpv2.tis.cwru.edu (mpv2.tis.cwru.edu [129.22.105.37])
        by mx.google.com with ESMTPS id j12si14497431qcu.159.2011.02.22.22.16.04
        (version=TLSv1/SSLv3 cipher=OTHER);
        Tue, 22 Feb 2011 22:16:05 -0800 (PST)
Received-SPF: pass (google.com: domain of carol@case.edu designates 129.22.105.37 as permitted sender) client-ip=129.22.105.37;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of carol@case.edu designates 129.22.105.37 as permitted sender) smtp.mail=carol@case.edu
Received: from mpv5.TIS.cwru.edu (mpv5.tis.cwru.edu [129.22.105.51])
	by mpv2.tis.cwru.edu (MOS 4.1.9-GA)
	with ESMTP id AVY04695
	for <alice@code406.com>;
	Wed, 23 Feb 2011 01:16:04 -0500
Received: from zinfandel.case.edu (zinfandel.STUDENT.CWRU.Edu [129.22.169.103])
	by mpv5.TIS.cwru.edu (MOS 3.10.9-GA)
	with ESMTP id FFR97310;
	Wed, 23 Feb 2011 01:13:52 -0500 (EST)
Message-Id: <201102230613.FFR97310@mpv5.TIS.cwru.edu>
Date: Wed, 23 Feb 2011 01:12:23 -0500
Subject: Test Bravo
From: "Carol Public" <carol@case.edu>
To: "Alice Public" <alice@case.edu>, "Dave Public" <dave@code406.com>

Sample #2

MX?

$ dig +short mx case.edu      
5 smtp.cwru.edu.
$ dig +short mx code406.com   
15 alt1.aspmx.l.google.com.
20 aspmx2.googlemail.com.
10 aspmx.l.google.com.
$ dig +short mx whitehouse.gov
105 mail3.eop.gov.
105 mail2.eop.gov.
105 mail1.eop.gov.
105 mail4.eop.gov.

Spoofing

Spoofed!

AUTH'd

AUTH'd?

...snip...
Received: from zinfandel.case.edu (zinfandel.STUDENT.CWRU.Edu [129.22.169.103])
        by mpv5.cwru.edu (MOS 4.2.3-GA)
        with ESMTP id AAO01893 (AUTH jas404)
        for <carol@case.edu>;
        Wed, 23 Feb 2011 05:43:27 -0500
Message-Id: <201102231043.AAO01893@mpv5.cwru.edu>
Date: Wed, 23 Feb 2011 05:43:36 -0500 (EST)
From: "Barack H. Obama, POTUS" <obama@whitehouse.gov>
Subject: Test Delta
To: "Carol Military" <carol@case.edu>
...snip...

How's SMTP Auth working out for you?

To the DNS!

Enter SPF

• RFC 4408 (2006)
• Defines a language indicating which hosts can send mail

Fail, SPF

Aside: Bedlam DL3

DKIM

X-Authentication-Results: shopping.example.net
      header.from=joe@football.example.com; dkim=pass
Received: from mout23.football.example.com (192.168.1.1)
      by shopping.example.net with SMTP;
      Fri, 11 Jul 2003 21:01:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; s=brisbane; d=example.com;
      c=simple/simple; q=dns/txt; i=joe@football.example.com;
      h=Received : From : To : Subject : Date : Message-ID;
      bh=2jUSOH9NhtVGCQWNr9BrIAPreKQjO6Sn7XIkfJVOzv8=;
      b=AuUoFEfDxTDkHlLXSZEpZj79LICEps6eda7W3deTVFOk4yAUoqOB
        4nujc7YopdG5dWLSdNg6xNAZpOPr+kHxt1IrE+NahM6L/LbvaHut
        KVdkLLkpVaVVQPzeRDI009SO2Il5Lu7rDNH6mZckBdrIx0orEtZV
        4bmp/YzhwvcubU4=;
Received: from client1.football.example.com  [192.0.2.1]
      by submitserver.example.com with SUBMISSION;
      Fri, 11 Jul 2003 21:01:54 -0700 (PDT)
From: Joe SixPack <joe@football.example.com>
To: Suzie Q <suzie@shopping.example.net>
Subject: Is dinner ready?
Date: Fri, 11 Jul 2003 21:00:37 -0700 (PDT)
Message-ID: <20030712040037.46341.5F8J@football.example.com>

Hi.

We lost the game. Are you hungry yet?

Joe.

A somewhat better example

Delivered-To: josh@code406.com
Received: by 10.204.10.85 with SMTP id o21cs344240bko;
        Wed, 23 Feb 2011 12:08:49 -0800 (PST)
Received: by 10.224.11.68 with SMTP id s4mr3811171qas.385.1298491728546;
        Wed, 23 Feb 2011 12:08:48 -0800 (PST)
Return-Path: <jas404+caf_=josh=code406.com@case.edu>
Received: from mpv2.tis.cwru.edu (mpv2.tis.CWRU.Edu [129.22.105.37])
        by mx.google.com with ESMTPS id u11si16081000qco.45.2011.02.23.12.08.47
        (version=TLSv1/SSLv3 cipher=OTHER);
        Wed, 23 Feb 2011 12:08:48 -0800 (PST)
Received-SPF: pass (google.com: domain of jas404+caf_=josh=code406.com@case.edu designates 129.22.105.37 as permitted sender) client-ip=129.22.105.37;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of jas404+caf_=josh=code406.com@case.edu designates 129.22.105.37 as permitted sender) smtp.mail=jas404+caf_=josh=code406.com@case.edu; dkim=pass (test mode) header.i=@gmail.com
Received: from mpv8.TIS.CWRU.edu (mpv8.tis.cwru.edu [129.22.105.116])
	by mpv2.tis.cwru.edu (MOS 4.1.9-GA)
	with ESMTP id AVY85285
	for <josh@code406.com>;
	Wed, 23 Feb 2011 15:08:46 -0500
Received: from mail-vw0-f54.google.com (mail-vw0-f54.google.com [209.85.212.54])
	by mpv8.TIS.CWRU.edu (MOS 4.1.9-GA)
	with ESMTP id PYR06195
	for <josh@code406.com>;
	Wed, 23 Feb 2011 15:08:46 -0500
Received: by mail-vw0-f54.google.com with SMTP id 16so3297370vws.13
        for <josh@code406.com>; Wed, 23 Feb 2011 12:08:46 -0800 (PST)
Received: by 10.52.158.136 with SMTP id wu8mr6914401vdb.218.1298491715454;
        Wed, 23 Feb 2011 12:08:35 -0800 (PST)
X-Forwarded-To: josh@code406.com
X-Forwarded-For: jas404@case.edu josh@code406.com
Delivered-To: jas404@cwru.edu
Received: by 10.220.199.132 with SMTP id es4cs398223vcb;
        Wed, 23 Feb 2011 12:08:35 -0800 (PST)
Received: by 10.224.45.66 with SMTP id d2mr3831936qaf.48.1298491714639;
        Wed, 23 Feb 2011 12:08:34 -0800 (PST)
Received: from mpv7.case.edu (mpv7.tis.cwru.edu [129.22.104.170])
        by mx.google.com with ESMTPS id p13si16064743qcu.137.2011.02.23.12.08.34
        (version=TLSv1/SSLv3 cipher=OTHER);
        Wed, 23 Feb 2011 12:08:34 -0800 (PST)
Received-SPF: pass (google.com: domain of hashbrowncipher@gmail.com designates 209.85.215.41 as permitted sender) client-ip=209.85.215.41;
Received: from mail-ew0-f41.google.com (mail-ew0-f41.google.com [209.85.215.41])
	by mpv7.case.edu (MOS 4.2.3-GA)
	with ESMTP id PSS19798
	for <jas404@case.edu>;
	Wed, 23 Feb 2011 15:08:33 -0500
Received: by ewy10 with SMTP id 10so2135277ewy.14
        for <jas404@case.edu>; Wed, 23 Feb 2011 12:08:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:mime-version:reply-to:date:message-id:subject
         :from:to:content-type;
        bh=PmuYA8hB/qCFpVD2Pe5Pt8UnMLFMbkx3nvj9C4RvMcI=;
        b=NPB5K/wjdboRumbd3CdbQtu9kZFszI/5V0//PU2sR/oYhUsxvUyYrrYBPT5C4jEBGY
         AlPW++pUKCmWZALYUIBgV9WRcf4B6Ox6cg04UdZFlbHH7I2a7R6hhkocidk0e07uPrN7
         Uzh6XpTqTkWxmyrCTZNnYqsnoAR+ISyDhAeAs=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
        b=K6C6taUHwxPg3KEMW+YQM/8fkc5FXdTup6O8qsaV0cDMI8eboBsWuxCoFiVhRXuAlo
         ZTo9Kd5vxGLO/tGBrS/isfIctU/guY2G801tgs23b30RAUHYyhlIHN9zIsIkHGBvZm5c
         epUHEeWIde/Ql6H7kAT+WIXIzb7BfiG6E6wHg=
MIME-Version: 1.0
Received: by 10.213.19.207 with SMTP id c15mr464434ebb.76.1298491712433; Wed,
 23 Feb 2011 12:08:32 -0800 (PST)
Received: by 10.213.108.76 with HTTP; Wed, 23 Feb 2011 12:08:32 -0800 (PST)
Reply-To: josh@karensnyder.com
Date: Wed, 23 Feb 2011 15:08:32 -0500
Message-ID: <AANLkTi=RAksw9=m0NGwy2z5ga4Fp_7nLtjA0xSEiTKFy@mail.gmail.com>
Subject: Test Echo
From: Josh Snyder <hashbrowncipher@gmail.com>
To: Joshua Snyder <jas404@case.edu>
Content-Type: multipart/alternative; boundary=0015174be298436d85049cf8a97b

--0015174be298436d85049cf8a97b
Content-Type: text/plain; charset=ISO-8859-1

DomainKeys, anyone?

--0015174be298436d85049cf8a97b
Content-Type: text/html; charset=ISO-8859-1

DomainKeys, anyone?<br><br>

--0015174be298436d85049cf8a97b--

Time for lunch

X-Spam-Status: No, score=6.176 tagged_above=2 required=6.31
 tests=[BAYES_50=0.001, DCC_CHECK=4, RDNS_NONE=0.1, SPF_HELO_PASS=-0.001,
 SPF_PASS=-0.001, SUBJ_ALL_CAPS=2.077]
...snip...
Date: Wed, 1 Aug 2007 02:41:49 -0500
Message-Id: <200708010741.l717fnss001406@scimall.com>
To: webmaster@mbhs.edu
Subject: MY BEST REGARDS
From: Macl Daniels <macldaniels@yahoo.com.sg>
Reply-To: macldaniels@gmail.com
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

Whaaat?

What is this MIME you speak of?

Delivered-To: josh@code406.com
Received: by 10.204.10.85 with SMTP id o21cs345875bko;
        Wed, 23 Feb 2011 13:08:55 -0800 (PST)
Received: by 10.213.33.10 with SMTP id f10mr518782ebd.53.1298495335022;
        Wed, 23 Feb 2011 13:08:55 -0800 (PST)
Return-Path: <hashbrowncipher@gmail.com>
Received: from mail-ey0-f169.google.com (mail-ey0-f169.google.com [209.85.215.169])
        by mx.google.com with ESMTPS id t51si20258762eeh.94.2011.02.23.13.08.54
        (version=TLSv1/SSLv3 cipher=OTHER);
        Wed, 23 Feb 2011 13:08:55 -0800 (PST)
Received-SPF: pass (google.com: domain of hashbrowncipher@gmail.com designates 209.85.215.169 as permitted sender) client-ip=209.85.215.169;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of hashbrowncipher@gmail.com designates 209.85.215.169 as permitted sender) smtp.mail=hashbrowncipher@gmail.com; dkim=pass (test mode) header.i=@gmail.com
Received: by eyh6 with SMTP id 6so2302369eyh.14
        for <josh@code406.com>; Wed, 23 Feb 2011 13:08:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:mime-version:reply-to:date:message-id:subject
         :from:to:content-type;
        bh=CMw6w+Jm5Jvb+G5lUmXpAMkcKuFH9BpZzTx7NivzZVg=;
        b=X5VjfBIBe336uOxu7SUuBK6Wt96OKxgtntEtxtrO9U7HiBn+JJlckSq86ZNIjoz9cx
         jrRswOJPgsc01UrXjOJLZsga/WRzwfETTbX/m/fHLepgSJzTgH4teoH7FGT2ERRfpHt+
         5whEuPmMU9OhxIByRajjRdwU60Ti10ULt7Oh0=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
        b=F6e+u/I5oCWD47hWWdGMWQ3vharWTx8RH3qML29deCYw/BV6YaK2CBPloGvIKoQmep
         yeUjRx0aQeCaf3IhrlQg8Nfo7F9DOO3bH/AAEzRCKZeQmb6tkjJZuzx4+TR3F/cIZNCA
         cWbg070hAoUtcGqxCQW1uz3UYuCp1dBnoS4Jk=
MIME-Version: 1.0
Received: by 10.213.34.207 with SMTP id m15mr6853ebd.89.1298495334545; Wed, 23
 Feb 2011 13:08:54 -0800 (PST)
Received: by 10.213.108.76 with HTTP; Wed, 23 Feb 2011 13:08:54 -0800 (PST)
Reply-To: hashbrowncipher@gmail.com
Date: Wed, 23 Feb 2011 16:08:54 -0500
Message-ID: <AANLkTi=M5jHHSPGpG-sCU+-2ho=c2b9-avHKT7sPjNLk@mail.gmail.com>
Subject: Test Foxtrot
From: Josh Snyder <hashbrowncipher@gmail.com>
To: Me <josh@code406.com>
Content-Type: multipart/mixed; boundary=000e0cd5bc5e287bc6049cf9818a

--000e0cd5bc5e287bc6049cf9818a
Content-Type: multipart/alternative; boundary=000e0cd5bc5e287baf049cf98188

--000e0cd5bc5e287baf049cf98188
Content-Type: text/plain; charset=ISO-8859-1

I am using *HTML email* to the fullest.  I've even attached this
image.<http://goto.case.edu/hacker/hacker-society-small.png>

--000e0cd5bc5e287baf049cf98188
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

I am using <b>HTML email</b> to the fullest.=A0 I've even attached <a h=
ref=3D"http://goto.case.edu/hacker/hacker-society-small.png">this image.</a=
><br>

--000e0cd5bc5e287baf049cf98188--
--000e0cd5bc5e287bc6049cf9818a
Content-Type: image/png; name="hacker-society-small.png"
Content-Disposition: attachment; filename="hacker-society-small.png"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_gkiqgsei0

iVBORw0KGgoAAAANSUhEUgAAAkYAAABvCAYAAAAJ4Q+7AAAAAXNSR0IArs4c6QAAAAZiS0dEAP8A
/wD/oL2nkwAAAAlwSFlzAAALEwAACxMBAJqcGAAAAAd0SU1FB9gMCwQHDGG2LNIAACAASURBVHja
7H15vM3V+v+zPnve+8wTzjEfQ2YhhFKZMhXpIpeKW3SLJsmVZLxFicSXG5VScshQqlvoNroSoS4d
... snip 920 lines ...
aaKJJppoookm/985SOJHUBZoHH+aaKKJJppoookmmmiiiSaaaKKJJppoookmmmiiiSaaaKKJJppo
ookmmmiiyb9L/g/x4fcelYr8SgAAAABJRU5ErkJggg==
--000e0cd5bc5e287bc6049cf9818a--

But how do I converse

...snip...
In-Reply-To: <d4131e580705210857w6534d948t34432c90dec8e9a9@mail.gmail.com>
...snip...
References: <1f65c35a0705192017j6ae21cfgc2cde2eef0ee54a1@mail.gmail.com>
 <1f65c35a0705201133k2ce3dcdfn64687f6e10afea55@mail.gmail.com>
 <d4131e580705201844x362047a8j8b15f109049fe5a6@mail.gmail.com>
 <1f65c35a0705201947x3d65bc2fvca838b1e0d4dd4ff@mail.gmail.com>
 <d4131e580705210857w6534d948t34432c90dec8e9a9@mail.gmail.com>