ASSP 1.8.5.2(0.0.02) (and a few prior versions) -- The header is
bleeding over into the body of the email again.  Granted, the email is
spam, but I've seen it happen several times now.  Here is an example
header and body.

Header:
Microsoft Mail Internet Headers Version 2.0
Received: from mydomain.com ([192.168.3.10]) by mailserver.mydomain.com
with Microsoft SMTPSVC(5.0.2195.6713);
         Fri, 14 Jan 2011 11:53:30 -0500
Received: from ASSP [192.168.3.10] by mail.mydomain.com - SurfControl
E-mail Filter (5.5.0); Fri, 14 Jan 2011 11:53:30 -0500
Received: from mail.picsthis.com ([98.158.238.93]
helo=mail.picsthis.com)
        with IPv4:26 by ASSP.nospam; 14 Jan 2011 11:53:23 -0500
Received: by mail.picsthis.com (PowerMTA(TM) v3.0c2) id h61voa01g749;
Fri, 14 Jan 2011 11:46:18 -0500 (envelope-from <v...@picsthis.com>)
Date: Fri, 14 Jan 2011 11:46:05 -0500
From: "wheel chair vans" <v...@picsthis.com>
Subject: Go anywhere with a wheelchair van
To: u...@mydomain.com
Message-ID: <nzx5tobpp6gbtabiijj...@picsthis.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
X-Assp-Delay: u...@mydomain.com not delayed (noDelayHelosRe contains:
        mail); 14 Jan 2011 11:53:23 -0500
X-Assp-Score: 19 (DNSBL: neutral, 98.158.238.93 listed in
blackholes.five-ten-sg.com
        dnsbl-2.uceprotect.net)
X-Assp-DNSBL: neutral, 98.158.238.93 listed in
(blackholes.five-ten-sg.com<-127.0.0.9;
        dnsbl-2.uceprotect.net<-127.0.0.2; )
X-Assp-Score: 50 (URIBL failed: 'picsthis.com' listed in
'black.uribl.com')
Return-Path: v...@picsthis.com
X-OriginalArrivalTime: 14 Jan 2011 16:53:30.0972 (UTC)
FILETIME=[92BD71C0:01CBB40B]
X-EsetId: 36C0EE2052F6B8116186


Body:
X-Assp-URIBL failed: 'picsthis.com' listed in 'black.uribl.com'
X-Assp-Score: 40 (Bayesian Probability: 1.0000)
X-Assp-Score: 10 (Bad IP Profile for 98.158.238.93)
X-Assp-Spam-Level: ***********************
X-Assp-Envelope-From: v...@picsthis.com
X-Assp-Version: 1.8.5.2(0.0.01) on ASSP.nospam
X-Assp-ID: ASSP.nospam id-12950-00986
X-Assp-Spam: YES
X-Assp-Original-Subject: Go anywhere with a wheelchair van
X-Assp-Spam-Reason: Score (119) over MessageScoringUpperLimit (49)
X-Assp-Message-Totalscore: 119
X-Assp-Intended-For: u...@mydomain.com
X-Assp-Copy-Spam: Yes
X-SEF-Processed: 5_5_0_210__2011_01_14_11_53_30

Then the rest of the body follows.

Kind Regards,
Brett


------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand 
malware threats, the impact they can have on your business, and how you 
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to