What does env_From=ok mean?

Gary Mills mills@cc.umanitoba.ca
Fri Jun 17 16:14:16 UTC 2005

Today, I received a phish that purported to come from service@paypal.com.
DCC added this header line:

  X-DCC-UofM-Metrics: electra 1033; env_From=ok Body=many Fuz1=many Fuz2=many

The envelope sender was indeed service@paypal.com, but this address
does not appear in any of our whitelist files, except in commented-
out form:

  #ok     env_from        service@paypal.com

There are some other paypal addresses in the whitecommon file, but
not this one.  How is this possible?  Could it somehow persiste in
the database after being commented out in a whitelist file?  There's
no DCC log for this message.

-Gary Mills-    -Unix Support-    -U of M Academic Computing and Networking-

More information about the DCC mailing list

Contact vjs@rhyolite.com by mail or use the form.