Submitted in the hope that SC programmer(s) will be able to analyze the
format of the headers and improve the parsing routines.
>
From [EMAIL PROTECTED] Tue May 1 17:57:53 2001
Received: from www1 (www.sep-i.com [211.10.17.142])
by dialup.oar.net (8.9.3/8.9.1) with ESMTP id RAA02683;
Tue, 1 May 2001 17:54:07 -0400 (EDT)
Received: from mxpool01.netaddress.usa.net (pool-63.49.34.73.mmph.grid.net
[63.49.34.73])
by www1 (2.0 Build 2131 (Berkeley 8.8.4)/8.8.4) with SMTP
id GAA13058; Wed, 02 May 2001 06:43:24 -0700
From: [EMAIL PROTECTED]
Message-ID: <00005bde2ba1$000018cb$[EMAIL PROTECTED]>
To: <Undisclosed.Recipients@www1>
Subject: Brand New Home Based Business For 2001!! 24617
Date: Tue, 01 May 2001 17:41:57 -1600
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
Content-Type: text/plain;
charset="Windows-1252"
X-UIDL: 88999eeb5f13ff5e312c9aaa82c97c33
http://spamcop.net/sc?id=z19208621z412673103214b07ee3df3e1f763b181bz
Parsing header:
Received: from www1 (www.sep-i.com [211.10.17.142]) by dialup.oar.net (8.9.3/8.9.1)
with
ESMTP id RAA02683; Tue, 1 May 2001 17:54:07 -0400 (EDT)
Possible spammer: 211.10.17.142
[show] "nslookup 142.17.10.211.dialups.mail-abuse.org." (checking ip) not found
[show] "nslookup www.sep-i.com" (checking ip) ip = 211.10.17.142
[show] "nslookup 142.17.10.211.blackholes.mail-abuse.org." (checking ip) not found
[show] "nslookup 142.17.10.211.inputs.orbs.org." (checking ip) ip = 127.0.0.2
blocked by ORBS
[show] "nslookup 142.17.10.211.dialups.mail-abuse.org." (checking ip) not found
[show] "nslookup 142.17.10.211.inputs.orbs.org." (checking ip) ip = 127.0.0.2
211.10.17.142 is an open relay - saving header for proof.
Received line accepted
Received: from mxpool01.netaddress.usa.net (pool-63.49.34.73.mmph.grid.net
[63.49.34.73])
by www1 (2.0 Build 2131 (Berkeley 8.8.4)/8.8.4) with SMTP id GAA13058; Wed, 02 May 2001
06:43:24 -0700
[show] "nslookup 142.17.10.211.dialups.mail-abuse.org." (checking ip) not found
Possible spammer: 63.49.34.73
[show] "nslookup pool-63.49.34.73.mmph.grid.net" (checking ip) ip = 63.49.34.73
[show] "nslookup mxpool01.netaddress.usa.net" (checking ip) ip = 204.68.23.103
[show] "nslookup mxpool01.netaddress.usa.net" (checking ip)
mxpool01.netaddress.usa.net not
63.49.34.73, discarded as fake.
[show] "dig -x 63.49.34.73 soa" (digging for start of authority) - [EMAIL PROTECTED]
ips don't match; mxpool01.netaddress.usa.net discarded as fake
[show] "nslookup 73.34.49.63.blackholes.mail-abuse.org." (checking ip) not found
[show] "nslookup 73.34.49.63.inputs.orbs.org." (checking ip) not found
Chain test:www1 =? www.sep-i.com
Chain error; 'www1' != 'www.sep-i.com' or ''; received line discarded
Right now, this email would be detained by SpamCop filters: chain error
Tracking message source:211.10.17.142:
_______________________________________________
SpamCop-Help mailing list
[EMAIL PROTECTED]
http://news.spamcop.net/mailman/listinfo/spamcop-help
