Hacker News Reader

Anybody that can run sendmail as root (or use an alternate program, or compile their own) can spoof the envelope sender.

View on HN

Ah, gotcha. You're saying that you sent an email with a valid envelope sender from your domain, with only a spoofed From: address, and gmail sent it back. If so, nice!

Yep, exactly.

Reply on news.ycombinator.com