Re: [Declude.JunkMail] H:Explanation of SPAM tests
Ok here's a new one (for me :)) X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [420e] This means that message "is missing a Message-ID: header." Here's the full header and I see a Message-ID header. Why does this appear? What's UP Gold is actually sending the messages? Actually, the Message-ID: header that you see was added by IMail. The Message-ID: is not required in order for an E-mail to be valid, but the RFCs say that it "SHOULD" be there. "SHOULD" in RFC terminology means that the header must be there *unless* there is a good reason for it not to be there, and the consequences of it not being there are known. I can't think of a good reason for the Message-ID: header not to be present (except that it saves programming time). The consequences of not having a Message-ID: header is that the mail may or may not be delivered if it is missing. All legitimate standard mail clients (Outlook, Eudora, etc.) include this header. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] H:Explanation of SPAM tests
Ok here's a new one (for me :)) X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [420e] This means that message "is missing a Message-ID: header." Here's the full header and I see a Message-ID header. Why does this appear? What's UP Gold is actually sending the messages? Burzin Received: from buffy.catalog.slcl.org [199.181.178.200] by imail.slcl.lib.mo.us (SMTPD32-7.13) id AE6CACA0368; Tue, 29 Oct 2002 23:30:20 -0600 From: "WhatsUp" <[EMAIL PROTECTED]> Date: Tue, 29 Oct 2002 23:25:06 -0600 To: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: text/plain;charset=us-ascii Subject: Router OCLC UP at 23:25:05 Message-Id: <[EMAIL PROTECTED]> X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [420e]. X-Declude-Sender: [EMAIL PROTECTED] [199.181.178.200] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMHEADERS X-Note: This E-mail was sent from buffy.slcl.lib.mo.us ([199.181.178.200]). X-RCPT-TO: <[EMAIL PROTECTED]> Status: U X-UIDL: 334882685 At 07:23 PM 11/06/2002 -0500, you wrote: Thanks, our clients are entering the server IP address to the right of the @ for some reason. Am I correct in understanding that this is the critical part of the message-id field? Ah, that would do it. The part of the Message-ID: header to the right of the "@" is required to be either a host name, or a "domain literal" (such as an IP address in brackets). So an IP is acceptable there, if it is in the format "Message-ID: ". -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] H:Explanation of SPAM tests
Thanks, our clients are entering the server IP address to the right of the @ for some reason. Am I correct in understanding that this is the critical part of the message-id field? Ah, that would do it. The part of the Message-ID: header to the right of the "@" is required to be either a host name, or a "domain literal" (such as an IP address in brackets). So an IP is acceptable there, if it is in the format "Message-ID: ". -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] H:Explanation of SPAM tests
Hi Scott, Thanks, our clients are entering the server IP address to the right of the @ for some reason. Am I correct in understanding that this is the critical part of the message-id field? Burzin At 01:56 PM 11/06/2002 -0500, you wrote: http://www.declude.com/JunkMail/tests.htm list spam tests. That does include some of the tests, but the "real" information appears in the manual, as well as http://www.declude.com/junkmail/support/ip4r.htm (for the public tests). Where can I go for more information on badheaders The BADHEADERS test is explained in the manual. and specifically broken email clients? What do you mean? A broken E-mail client is one that is broken, does not work. In most cases, it's because the mail client is not RFC-compliant. I've noticed that much of the mail sent thoughout my organization has a bad header and is often from a broken email client. The BADHEADERS test detects spam-like headers that are not RFC-compliant and are never sent by legitimate mail clients that are working properly. If you give an example of the headers of one of these E-mails, I can let you know what the problem is (or, you can look up the code at the BADHEADERS Lookup tool at http://www.declude.com/tools ). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- Burzin Sumariwalla Phone: (314) 994-9411 x291 [EMAIL PROTECTED] Fax: (314) 997-7602 Pager: (314) 407-3345 Networking and Telecommunications Manager Information Technology Services St. Louis County Library District 1640 S. Lindbergh Blvd. St. Louis, MO 63131 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] H:Explanation of SPAM tests
http://www.declude.com/JunkMail/tests.htm list spam tests. That does include some of the tests, but the "real" information appears in the manual, as well as http://www.declude.com/junkmail/support/ip4r.htm (for the public tests). Where can I go for more information on badheaders The BADHEADERS test is explained in the manual. and specifically broken email clients? What do you mean? A broken E-mail client is one that is broken, does not work. In most cases, it's because the mail client is not RFC-compliant. I've noticed that much of the mail sent thoughout my organization has a bad header and is often from a broken email client. The BADHEADERS test detects spam-like headers that are not RFC-compliant and are never sent by legitimate mail clients that are working properly. If you give an example of the headers of one of these E-mails, I can let you know what the problem is (or, you can look up the code at the BADHEADERS Lookup tool at http://www.declude.com/tools ). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
