I have been having problems with incomplete or broken headers in lots of spam
messages. Sometimes I will see the missing headers in
the body of the message, sometimes not. See below for example. The subject
when the message arrived in the inbox was: Subject:
EXPLICIT: Nice online dating booty
Well, now that you put it that way, probably not... ;-)
Bill
- Original Message -
From: "John T (Lists)" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, January 24, 2006 6:36 PM
Subject: RE: [Declude.JunkMail] Earthlink/prodigy
Does it make a difference who is supplying the bed and who is su
Title: Logged spam getting to mailbox
Corby,
Because of MS SMTP handling the E-mail before it reaches my
IMail/Declude system, Declude always inserts it's headers in the proper
block, however MS SMTP can cause some of the pre-Declude headers
(original) to appear in either the top of the body o
Does it make a difference who is supplying the bed and who is supplying the
bedding?
John T
eServices For You
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Bill Landry
> Sent: Tuesday, January 24, 2006 5:29 PM
> To: Declude.Junk
Title: Logged spam getting to mailbox
Ok, thanks very much. I'll see if they'll get me the
latest 2.x version to see if that works. Can you clarify
somethingare you saying that you're receiving mail from the same spammer
that's causing my problem, but your system is handling it
correc
Title: Logged spam getting to mailbox
Corby,
I assumed that you weren't using an MS gateway, I was just letting you
know that what happened to these headers was going to be different on
my system.
I have tons of spam on my system generated by this spamware and it's
all showing the same behavi
I think you've got it backwards, SBC acquired AT&T but is keeping the AT&T
name.
Bill
- Original Message -
From: "John T (Lists)" <[EMAIL PROTECTED]>
To:
Sent: Tuesday, January 24, 2006 4:23 PM
Subject: RE: [Declude.JunkMail] Earthlink/prodigy
And since AT&T now owns SBC, aren't we get
Title: Logged spam getting to mailbox
Hi
Matt,
I'm not using any MS gateway on this. The mail
comes into Imail/declude and uses Imail as the email server. I
opened the message with notepad and didn't locate any misplaced headers. I would like to try updating to 2.0.6 as you
suggest, b
Title: Logged spam getting to mailbox
Corby,
I also received a bunch of these, and one copy that I came up with in a
hold box showed that the headers were in fact broken. My MS SMTP
gateway shows the From, Bcc, and locally inserted MS SMTP headers at
the very bottom
of this message. That's h
Title: Logged spam getting to mailbox
Well I'm somewhat more confused as I don't really know
what "bad folding" means. However, I don't see any of the X-headers in the
message body.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
MattSent: Tuesday, January 24, 20
Title: Logged spam getting to mailbox
Nick, FYI, by gatewaying through MS SMTP/ORF, that actually normalizes
the headers before it gets to Declude and therefor this behavior is not
seen. You will however see some of the original headers left in the
body on some messages, but not the ones from
And since AT&T now owns SBC, aren't we getting back to Ma Bell?
John T
eServices For You
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Kevin Bilbee
> Sent: Tuesday, January 24, 2006 3:56 PM
> To: JunkMail Declude
> Subject: [Dec
Is there a relationship here. I am getting legit email from this combo and
would like to know. It looks to me like prodigy is now owned by SBC.
Kevin Bilbee
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list. To
Title: Logged spam getting to mailbox
Current version does not fix this "folding" problem.
Declude is testing a newer version that may fix the problem, but no joy
yet.
Matt wrote:
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
MattSent: Tuesday, January 24, 2006 4:34 PM
Title: Logged spam getting to mailbox
Agid, Corby wrote:
Actually, I'm still running
2.0.5. I suppose that I should probably upgrade, eh?
I haven't. I'm on 2.16
Other than this particular
bugger, it's worked well for me.
it is odd to me that a particular email f
Title: Logged spam getting to mailbox
Andrew probably nailed this. In at least some versions of Declude, the
headers that it inserts could land in the body of the message due to
bad folding techniques that the spammer uses (sometimes also legitimate
mailers will produce this flaw). Your clien
Title: Logged spam getting to mailbox
Actually, I'm still running 2.0.5. I suppose
that I should probably upgrade, eh?
I don't actually delete mail at any score. I
use the header information in my email client to sort the incoming
messages. Other than this particular bugger, it's w
Title: Logged spam getting to mailbox
Corby, to help you rule out "header corruption" I checked
my own logs, and found that I received (and held) three copies of the same spam
message today.
Inspecting each of those with notepad showed that my X-
headers are being added, therefore "header c
For those that are interested in the effect of multi-CPU's and
hyperthreading has with an IMail/Declude setup, here's some additional
research.
I previously tested my dual Xeon setup with both hyperthreading enabled
and disabled, and found that the utilization jumped an astonishing ~100%
when
Title: Logged spam getting to mailbox
Odd - just because its always the same email. What number do you delete
on? Although the logs will balloon in size running the Declude in DEBUG
may shed some light. I presume this is Declude 3x ver?
-Nick
Agid, Corby wrote:
Hello,
I'm ha
Title: Logged spam getting to mailbox
Hello,
I'm having trouble with a particular spam message getting to my mailbox each day. The declude log file shows the scanning and scoring. However, the message that lands in the mailbox shows no sign of being scanned….ie there are no X-RBL headers
Guhl, Markus (LDS) wrote:
hi,
are those files backing up regular incomming mails or are they *.fwd
and *.gse files?
what happens when you put a mail (d*.smd and q*.smd) into spool "by
hand" (something like a false positiv)?
which version of imail do you use?
I've tried manipulating
I’d turn on verbose logging in imail
and declude. In the Declude log file something did not go quite right at
17:14:34:513.
It looks like Imail is functioning ok but
declude miss handled the email\attachment in question.
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Beha
I actually reached for an older linux distro called sentinix. Comes kind of
out of the box with Snort/ACD and Nagios/Nagios Admin.
A little dated but as it sits behind a very secure firewall it is extremely
effective and fairly painless and has a cost of $0.
Chris
-Original Message-
Fr
24 matches
Mail list logo
