Hoax Email!
Author
Discussion

peter hh

Original Poster:

269 posts

245 months

Tuesday 7th November 2006
quotequote all
Looking at sending a prank email to a friend of mine at work,but i want it to appear to be off his wife! hehe

Have looked at various prank emailers. but they all say this email is fake and my ip etc at the bottom of the email.

Anyone know how i can do this, or any good websites?

Thanks

zumbruk

7,848 posts

291 months

Tuesday 7th November 2006
quotequote all
Well, I could tell you, but then I'd have to kill you ...

timsta

2,779 posts

277 months

Tuesday 7th November 2006
quotequote all
Google for "Telnet SMTP" Basically, you telnet to port 25 on your mail server and go fom there. You need to practice a bit, but it's easy.

ThePassenger

6,962 posts

266 months

Tuesday 7th November 2006
quotequote all
Quick and simple way...

In your e-mail client open up the settings and change your name to be her name and your e-mail address to be her e-mail address.

Send message.

Change them back.

Anyone technically savvy would look at the headers and see it came from the wrong client/wrong SMTP server or such but it's usually good enough for the odd joke.

peter hh

Original Poster:

269 posts

245 months

Tuesday 7th November 2006
quotequote all
Still cant do it. I want to send it from my home computer, because if i send it from work i wont be able to stop myself from lol.

Ive got a hotmail, yahoo account etc, but i cant send it from there cause then he will know they have come from me.

ThePassenger

6,962 posts

266 months

Tuesday 7th November 2006
quotequote all
peter hh said:
Still cant do it. I want to send it from my home computer, because if i send it from work i wont be able to stop myself from lol.

Ive got a hotmail, yahoo account etc, but i cant send it from there cause then he will know they have come from me.


Send it via your ISP's e-mail system (i.e. whatever you use Outlook Express / Thunderbird to poll) those two program WILL let you send a 'fake' message.

Tripps

5,814 posts

303 months

Tuesday 7th November 2006
quotequote all
ThePassenger said:
Send it via your ISP's e-mail system (i.e. whatever you use Outlook Express / Thunderbird to poll) those two program WILL let you send a 'fake' message.
A lot of ISP's outbound SMTP servers limit the sender address though these days (to prevent spam), so this won't always work.

ThePassenger

6,962 posts

266 months

Tuesday 7th November 2006
quotequote all
Tripps said:
ThePassenger said:
Send it via your ISP's e-mail system (i.e. whatever you use Outlook Express / Thunderbird to poll) those two program WILL let you send a 'fake' message.
A lot of ISP's outbound SMTP servers limit the sender address though these days (to prevent spam), so this won't always work.


I wish they did. It would stop so much crap floating around the internet. It would also annoy the living crap out of me because it would make say NTL's SMTP server refuse to send my e-mails... which would be reason enough to ditch them and find a better ISP.

Most of the SMTP servers I've encountered require the connection to be made from within the ISP's ifrastructure, so you can't send e-mail via them if you aren't connected to them. Which is both a good thing... sometimes

The actual address used and the name used are pretty much irrelevant.

Tripps

5,814 posts

303 months

Tuesday 7th November 2006
quotequote all
ThePassenger said:
Most of the SMTP servers I've encountered require the connection to be made from within the ISP's ifrastructure, so you can't send e-mail via them if you aren't connected to them. Which is both a good thing... sometimes
I've seen both used, although limiting to those connected to the ISP has been more common, as limiting by sender address can be annoying. I've started spotting it lately, as I send e-mail from various different domains, as some of the SMTP servers I've used for this have stopped allowing it now.

Authenticated SMTP is thankfully becoming more common now too, although not perfect is provides a few more barriers to spammers.

peter hh

Original Poster:

269 posts

245 months

Wednesday 8th November 2006
quotequote all
ThePassenger said:
[Send it via your ISP's e-mail system (i.e. whatever you use Outlook Express / Thunderbird to poll) those two program WILL let you send a 'fake' message.



Could you explain this abit more, i dont use outlook, and am i bit of a newbie in this area!

onomatopoeia

3,526 posts

248 months

Wednesday 8th November 2006
quotequote all
ThePassenger said:
Tripps said:
ThePassenger said:
Send it via your ISP's e-mail system (i.e. whatever you use Outlook Express / Thunderbird to poll) those two program WILL let you send a 'fake' message.
A lot of ISP's outbound SMTP servers limit the sender address though these days (to prevent spam), so this won't always work.


I wish they did. It would stop so much crap floating around the internet. It would also annoy the living crap out of me because it would make say NTL's SMTP server refuse to send my e-mails... which would be reason enough to ditch them and find a better ISP.


You raise the very reason why sender address verification is bad. It would annoy lots of people, me included.

Even though I no longer use them for connectivity I retain my Demon TAM account as I've had the address for 12 years and changing it would be a too much hassle, I still get emails from people I haven't communicated with for years. So from home on A&A I relay via my own SMTP server using qmail and using my demon address as From and Reply-to. Fortunately A&A are extremely unlikely to ever implement anything as silly as sender address verification on outoging emails or intercepting port 25. If they do, I'm off.

Tripps

5,814 posts

303 months

Wednesday 8th November 2006
quotequote all
onomatopoeia said:
You raise the very reason why sender address verification is bad. It would annoy lots of people, me included.
A difficult one this, as I require this sort of functionality too, as with yourself I've got lots of account dotted around that I pick up and send from so "impersonation" for me is a valid and good thing.

However, I can understand an ISPs view if it stops spam (some) being sent through them and helps to stop muppets sending sending impersonated death threats to the president and that sort of thing, as the back-lash they get must be a right royal pain and waste a lot of their time.

guydw

1,651 posts

314 months

Wednesday 8th November 2006
quotequote all
be aware that your companies IT department may not be as amused as you, so be careful... some IT managers love the chance to kick someone for breaking their beloved policy.

ThePassenger

6,962 posts

266 months

Wednesday 8th November 2006
quotequote all
peter hh said:
ThePassenger said:
[Send it via your ISP's e-mail system (i.e. whatever you use Outlook Express / Thunderbird to poll) those two program WILL let you send a 'fake' message.



Could you explain this abit more, i dont use outlook, and am i bit of a newbie in this area!


Sure.
Basically unless you are with some weird and wild ISP (such as AOL) then your ISP (be it NTL, Nildrim, whoever) will provide a certain number of e-mail addresses. Usually at least one is pre-configured as the main means of them contact you (for cease & desist's, outage notices, etc.) they should have provided instructions about how to use Outlook Express or Thunderbird to poll this account.

When you've got this configured you then simply change the e-mail address and name fields within the program your using and send the message.

Tripps said:
onomatopoeia said:
You raise the very reason why sender address verification is bad. It would annoy lots of people, me included.
A difficult one this, as I require this sort of functionality too, as with yourself I've got lots of account dotted around that I pick up and send from so "impersonation" for me is a valid and good thing.

However, I can understand an ISPs view if it stops spam (some) being sent through them and helps to stop muppets sending sending impersonated death threats to the president and that sort of thing, as the back-lash they get must be a right royal pain and waste a lot of their time.


Unfortunatley it doesn't stop spam. Most ISP's will allow you to route to other SMTP servers (i.e. I could, if I was bothered make use of sarahhayes.is-a-geek.net's smtp system for sending mail) and most spam is sent via bot-net's these days which have their own smtp system built in thus bypassing the ISP's mail system entierly (other than bounces and "feck off and die" responses sent to a forged address).

The best way to stop spam would be to impliment "face punching via standard TCP/IP"

peter hh

Original Poster:

269 posts

245 months

Thursday 9th November 2006
quotequote all
Thanks Sarah i have managed to do it,job done!

But could my ISP get p**sed off at me for doing this? and can my mate trace from where they are coming from?

Edited by peter hh on Saturday 11th November 13:29

ThePassenger

6,962 posts

266 months

Thursday 9th November 2006
quotequote all
peter hh said:
Thanks Sarah i have managed to do it, I downloaded QT SMTP Server 3 as a free trial and then linked that up with outlook express, and job done!

But could my ISP get p**sed off at me for doing this? and can my mate trace from where they are coming from?


For a 1 off, your ISP isn't likley to care all that much. Especially as it's just a joke between you and your friend; thus if he gets upset you'll already have the beer nicely chilled

peter hh

Original Poster:

269 posts

245 months

Thursday 9th November 2006
quotequote all
ThePassenger said:
[For a 1 off, your ISP isn't likley to care all that much. Especially as it's just a joke between you and your friend; thus if he gets upset you'll already have the beer nicely chilled


Can he trace me and kick my arse tho! shoot

ThePassenger

6,962 posts

266 months

Thursday 9th November 2006
quotequote all
peter hh said:
ThePassenger said:
[For a 1 off, your ISP isn't likley to care all that much. Especially as it's just a joke between you and your friend; thus if he gets upset you'll already have the beer nicely chilled


Can he trace me and kick my arse tho! shoot


yes

The headers of the message will point to the mail server you used, if you used a local smtp machine it will happily report the originator as being your machine. So anyone with a bit of sense and some probing could figure it out.