Hi!

 I posted a message to the forum about this issue sunday, but haven't gotten
any response on it - so I'll try again.

I've been emailing with some SpamCop.net people, because one of my
submissions by mistake pointed my backup MX up as spam-relaying :-(

The fuzz has been identified to be caused by the reporter.py script (which
actually also is present on SpamCop's own webpage) - because the script
masks the hostname/domain of the last mailserver, which is not allowed
according to the SpamCop-admin I was mailing with. The headers need to
remain intact - only the recipient name is allowed to be masked.

Consider a mail with the following headers, where the host resides on the
same domain as where the recipient has his/her email-address:

Headers before processing:
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 11568 invoked by uid 615); 10 Nov 2003 15:50:18 -0000
Received: from [EMAIL PROTECTED] by worf.andebakken.dk by uid 81 with
qmail-scanner-1.20
  (clamscan: 20030806. uvscan: v4.1.60/v4302. f-prot: 4.1.2/3.13.4.
spamassassin: 2.60. Clear:RC:0(65.43.168.180):SA:1(11.5/5.0):.
  Processed in 3.456255 secs); 10 Nov 2003 15:50:18 -0000
Received: from adsl-65-43-168-180.dsl.bcvloh.ameritech.net (HELO
mgmt.ucalgary.ca) (65.43.168.180)
  by worf.andebakken.dk with SMTP; 10 Nov 2003 15:50:14 -0000
X-Mailer: Pegasus Mail for Win32 (v3.12a)
Date: Mon, 10 Nov 2003 15:48:01 +0000
Message-ID: [EMAIL PROTECTED]
MIME-Version: 1.0
Subject:
=?iso-8859-1?B?UmU6T3JkZXIgU2lsZGVuYWZpbCBDaXRyYXRlICBmcm9tIGhvbWUgLSBubyBkb
2N0b3IgcmVxdWlyZWQu?=
From: "Eunice K. Trujillo" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Content-Type: text/html
Content-Transfer-Encoding: 8bit


And after processing (calling the script like "cat /var/tmp/message | python
./reporter.py"):

Return-Path: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 11568 invoked by uid 615); 10 Nov 2003 15:50:18 -0000
Received: from [EMAIL PROTECTED] by XXXX.XXXXXXXXXXXXX by uid 81 with
qmail-scanner-1.20
  (clamscan: 20030806. uvscan: v4.1.60/v4302. f-prot: 4.1.2/3.13.4.
spamassassin: 2.60. Clear:RC:0(65.43.168.180):SA:1(11.5/5.0):.
  Processed in 3.456255 secs); 10 Nov 2003 15:50:18 -0000
Received: from adsl-65-43-168-180.dsl.bcvloh.ameritech.net (HELO
mgmt.ucalgary.ca) (65.43.168.180)
  by XXXX.XXXXXXXXXXXXX with SMTP; 10 Nov 2003 15:50:14 -0000
X-Mailer: Pegasus Mail for Win32 (v3.12a)
Date: Mon, 10 Nov 2003 15:48:01 +0000
Message-ID: [EMAIL PROTECTED]
MIME-Version: 1.0
Subject:
=?iso-8859-1?B?UmU6T3JkZXIgU2lsZGVuYWZpbCBDaXRyYXRlICBmcm9tIGhvbWUgLSBubyBkb
2N0b3IgcmVxdWlyZWQu?=
From: "Eunice K. Trujillo" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Content-Type: text/html
Content-Transfer-Encoding: 8bit
X-TMDA-Recipient: [EMAIL PROTECTED]

Clearly, the script masks the recipient address (at least the domain) - but
also the hostname/domain of the last mailserver... The problem is what to do
? I think the script needs to be more or less redesigned in order to meet
the requirements I was told from SpamCop....

Regards,

/Brian
_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to