I had a complaint from a user that obvious spam was getting through
to her. It has an X-DCC header like this:
X-DCC-UofM-Metrics: electra 1032; Body=1
When I checked the DCC log, it was a typical multipart/alternative
MIME message with a text/plain and a text/html portion. Why would
there be no Fuz1 and Fuz2 checksums in this case? Could they be
using funny MIME headers? Here's how they look:
Message-ID: <[EMAIL PROTECTED]>
Date: Sun, 21 Jan 2007 03:09:36 -0500 (EST)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="=_UtK6uXq4A5Yci58jSK72cg"
--=_UtK6uXq4A5Yci58jSK72cg
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
...
--=_UtK6uXq4A5Yci58jSK72cg
Content-Type: text/html; charset=us-ascii;
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
...
--=_UtK6uXq4A5Yci58jSK72cg--
Here are the checksums:
X-DCC-UofM-Metrics: electra 1032; Body=1
reported: 1 checksum server
IP: 82f96651 d907165a 7ecbbfae cc048d8d
env_From: 115ef1eb 8ef5ea31 23913209 f95ef84c
From: f9db32b5 6fdac68a 66500ee0 f835b8f3
substitute helo: ac6d0199 17f74635 a0d1001d 1f22c5ad
Message-ID: 0b4558fe 97b01582 da9d9685 79bbb28a
Received: 7f6fa296 bb9146a3 46eee885 e6842970
Body: b87c87e2 d34fc325 9dffc846 c15ce291 0
substitute mail_host: b1683191 17cfcaad e7ae7aba afef82dd
I can send the entire DCC log of this and similar messages, if that
will help.
--
-Gary Mills- -Unix Support- -U of M Academic Computing and Networking-
_______________________________________________
DCC mailing list [email protected]
http://www.rhyolite.com/mailman/listinfo/dcc
