|
Hi all, I have a question about where the HEADERS stop and the BODY
starts with respect to the filtering files HEADERS and BODY commands. When an e-mail hits my SPAM threshold (10) I do an ATTACH
command. The first is the “header” that I see when I use
Outlook to View | Options of the mail that appeared in my inbox. Below this is
the header that gets placed into the wrapper message from the %HEADERS%
variable. What I am really trying to understand is what section is the line Content-Type: application/vnd.ms-excel; Found in? Is it HEADERS or BODY? If it is HEADERS then why
does the %HEADERS% variable not report it in the spam wrapper? Thanx -------------------------- From Outlook Header
--------------------------------------------- Microsoft Mail Internet Headers Version 2.0 Received: from navmail.lanshop.com ([10.0.0.4]) by
mail1.lanshop.com with Microsoft SMTPSVC(5.0.2195.6713); Fri,
14 May 2004 15:51:32 -0400 Received: from bigdee.com ([66.36.230.43]) by navmail.lanshop.com (SAVSMTP 3.1.2.35) with SMTP id
M2004051415513117970 ; Fri, 14 May 2004 15:51:31 -0400 Message-ID: <[EMAIL PROTECTED]> From: "Anti-SPAM Service" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: ***[SPAM]***[10]***competitive upgrade... Date: Fri, 14 May 2004 19:53:35 -0000 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="SomeRandomStuffGoesHere" X-RBL-Warning: HELOBOGUS: Domain
ROSMIME03.enterprise.veritas.com has no MX or A records [0301]. X-RBL-Warning: IPNOTINMX: X-RBL-Warning: NOLEGITCONTENT: No content unique to
legitimate E-mail detected. X-Declude-Sender: [EMAIL PROTECTED] [143.127.131.4] X-Declude-Spoolname: D23b90f5f008a3926.SMD X-Note:
------------------------------------------------------------------------ X-Note: Process Time: Scanned at 15:53:35 on 05/14/2004 X-Note: Reverse DNS: Sent from
skyway-bridge.veritas.com ([143.127.131.4]). X-Note: Country Path: UNITED STATES->destination X-Note: X-Note: Tests Failed: HELOBOGUS, IPNOTINMX, NOLEGITCONTENT,
WEIGHT10, FILTER-VIAGRA-RXc [10] X-Note: X-Note: Sender: [EMAIL PROTECTED] X-Note: Spool File: D23b90f5f008a3926.SMD X-Note: X-Note: This E-mail was scanned by Declude JunkMail version
1.79i6 X-Note: Total spam weight of this E-mail is 10. X-Note:
------------------------------------------------------------------------ Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 14 May 2004 19:51:32.0075 (UTC)
FILETIME=[DAE56BB0:01C439EC] --SomeRandomStuffGoesHere Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit --SomeRandomStuffGoesHere Content-Type: message/rfc822; name="spam.eml" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="spam.eml" Received: from ROSMIME03.enterprise.veritas.com
[143.127.131.4] by bigdee.com with ESMTP (SMTPD32-8.10) id A3B9F5F008A; Fri, 14 May 2004
15:53:29 -0400 Received: from lmoxch01.enterprise.veritas.com (unverified)
by ROSMIME03.enterprise.veritas.com (Content Technologies SMTPRS 4.3.12) with ESMTP id
<[EMAIL PROTECTED]> for <[EMAIL PROTECTED]>; Fri, 14 May 2004 14:51:23 -0500 Received: by lmoxch01.enterprise.veritas.com with Internet
Mail Service (5.5.2656.59) id
<K6WLDCM1>; Fri, 14 May 2004 15:51:22 -0400 Message-ID:
<[EMAIL PROTECTED]> From: Paulo Chen <[EMAIL PROTECTED]> To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> Subject: competitive upgrade... Date: Fri, 14 May 2004 15:51:20 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2656.59) Content-Type: multipart/mixed; boundary="----_=_NextPart_000_01C439EC.C3B973B4" ------_=_NextPart_000_01C439EC.C3B973B4 Content-Type: text/plain; charset="iso-8859-1" ------_=_NextPart_000_01C439EC.C3B973B4 Content-Type: application/vnd.ms-excel; name="VERITAS
Competitive Upgrade Promo 2004.xls" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="VERITAS
Competitive Upgrade Promo 2004.xls" ------_=_NextPart_000_01C439EC.C3B973B4-- --SomeRandomStuffGoesHere-- -------------------------- From %HEADERS% Variable in
the spam.eml wrapper --------------------------------------------- Received: from
ROSMIME03.enterprise.veritas.com [143.127.131.4] by bigdee.com with ESMTP (SMTPD32-8.10) id
A3B9F5F008A; Fri, 14 May 2004 15:53:29 -0400 Received: from
lmoxch01.enterprise.veritas.com (unverified) by
ROSMIME03.enterprise.veritas.com (Content Technologies SMTPRS 4.3.12)
with ESMTP id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Fri, 14 May 2004 14:51:23 -0500 Received: by
lmoxch01.enterprise.veritas.com with Internet Mail Service (5.5.2656.59) id
<K6WLDCM1>; Fri, 14 May 2004 15:51:22 -0400 Message-ID:
<[EMAIL PROTECTED]> From: Paulo Chen
<[EMAIL PROTECTED]> To:
"'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> Subject: competitive
upgrade... Date: Fri, 14 May 2004
15:51:20 -0400 MIME-Version: 1.0 X-Mailer: Internet
Mail Service (5.5.2656.59) Content-Type:
multipart/mixed; boundary="----_=_NextPart_000_01C439EC.C3B973B4" Goran Jovanovic The |
<<image001.gif>>
