John,

For those of us new to mail header issues, could you describe how this
works as a spammer's ploy.

Doug Daulton
Email Systems Manager 
Email Marketing | Graphic Arts
MGM MIRAGE Advertising, Inc.
www.mgmmirage.com


-----Original Message-----
From: John Hardin [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, August 11, 2004 12:25 PM
To: SpamAssassin list
Subject: spammer headers: X-Mailer

The email sanitizer truncates long subject lines to prevent buffer
overflows. Yawn.

The interesting part for SA is the contents of the X-Mailer header and
the header immediately following it.

Are the spammers getting a bit free with their %RANDOM% tags, perhaps?
:)

On Wed, 2004-08-11 at 12:08, Procmail Security daemon wrote:
> Trapped excessively long header:
> Subject: We Do The Talking For You
chicago eire capacitive foray piddle nero embryology djakarta precept
wingmen intellectual cackle brenner elucidate consul horseback fiche
approximant anatomy gamble dowitcher successor associable cochlea
libretto landmark thymus claustrophobic decolonize 
> 
> STATUS: Header truncated.
> 
> Headers from message:
> 
> > From [EMAIL PROTECTED]  Wed Aug 11 12:08:19 2004
> > Return-Path: <[EMAIL PROTECTED]>
> > Received: from 207.14.61.33 ([200.247.68.245])
> >     by {REMOVED}.com (8.11.6/linuxconf) with SMTP id i7BJ8CE30042
> >     for <[EMAIL PROTECTED]>; Wed, 11 Aug 2004 12:08:14 -0700
> > Message-ID: <[EMAIL PROTECTED]>
> > From: "Peggy King" <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
> > Old-Subject: We Do The Talking For You
chicago eire capacitive foray piddle nero embryology djakarta precept
wingmen intellectual cackle brenner elucidate consul horseback fiche
approximant anatomy gamble dowitcher successor associable cochlea
libretto landmark thymus claustrophobic decolonize 
> > Date: Wed, 11 Aug 2004 17:13:53 -0300
> > X-Mailer: moo airlift
> > eater-carabao: agee delusive tid
> > MIME-Version: 1.0
> > Content-Type: multipart/alternative;
> >     boundary="--17427823107227209060"
> > Subject: We Do The Talking For You
chicago eire capacitive foray piddle nero embryology djakarta precept
wingmen intellectual cackle brenner elucidate consul horseback fiche
approximant anatomy gamble d

 
--
John Hardin  KA7OHZ                           <[EMAIL PROTECTED]>
Internal Systems Administrator                    voice: (425) 672-1304
Apropos Retail Management Systems, Inc.             fax: (425) 672-0192
-----------------------------------------------------------------------
 If you smash a computer to bits with a mallet, that appears to count
as encryption in the state of Nevada.
                                               - CRYPTO-GRAM 12/2001
-----------------------------------------------------------------------





Reply via email to