Jump to content
Sign in to follow this  
gazza

Can't report some spam from Safari

Recommended Posts

Very occasionally, about one in a thousand times, I receive a spam e-mail that the spamcop reporting mechanism won't allow me to report - it does nothing, not even delete it. These spams invariably have attachments, but apart from that I can't see any difference from other spam e-mails. Anyone got any ideas?

Example (without recipient info):

From: intsasafer1[at]gmail.com

Subject: Enjoy the Gift

Date: 4 March 2005 13:42:06 GMT

To: xxxxxxxxxxxxxx

Received: xxxxxxxxxx; Fri, 4 Mar 2005 07:35:11 GMT

Received: from [218.158.231.253] (helo=camtic.or.kr) by vimp3.rdg.ac.uk (Exim: virusscanner) with smtp id 1D77L2-0003Nf-RR for xxxxxxxxxxxxxx; Fri, 04 Mar 2005 07:35:11 +0000

Received: (qmail 27266 invoked from network); 4 Mar 2005 06:31:05 +0900

Received: from unknown (HELO gmail.com) (218.158.231.61) by ns.camtic.or.kr with SMTP; 4 Mar 2005 06:31:05 +0900

Message-Id: <022c01c520bf$f4a3e030$716535c8[at]dk.ipb>

Mime-Version: 1.0

Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0229_01C5207C.E680A030"

X-Priority: 3

X-Msmail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.3790.0

X-Mimeole: Produced By Microsoft MimeOLE V6.00.3790.0

X-Scan-Signature: 9af625d6936742ff07a879d9588dccfb

X-spam-Status: No, hits=3.2 required=5.0 tests=BAYES_50=0.001,DATE_IN_FUTURE_06_12=1.973,HTML_50_60=0.1,HTML_IMAGE_ONLY_04=1.001,HTML_MESSAGE=0.1 autolearn=no version=2.64

X-spam-Level: ***

Content-Length: 81707

Share this post


Link to post
Share on other sites

Safari on my iBook is a web browser. If your Safari is also a web browser, you've left a lot of detail out of your problem description. Are you doing a cut/paste thing, are you talking about web-mail access to a SpamCop e-mail account ...??? Posting your spam "here" doesn't really help too much as so much stuff is handled so poorly in this application .. wgite space dropped, etc. ..

Share this post


Link to post
Share on other sites

Whoops! I meant Apple Mail, not Safari (I use the latter as my Web browser). The example I gave was cut and pasted directly from Mail, without the attached image.

Share this post


Link to post
Share on other sites
Whoops! I meant Apple Mail, not Safari (I use the latter as my Web browser).  The example I gave was cut and pasted directly from Mail, without the attached image.

25085[/snapback]

I just received another two identical spams that I can't report. Is this something to do with the attached image, or the fact that it is a multi-part mail?

From: 242MGNHP[at]attglobal.net

Subject: {spam?} No more spyware

Date: 7 March 2005 14:47:26 GMT

To: xxxxxxxxx

Received: from xxxxxxxxxxx by xxxxxxxxxx with ESMTP id j27F96BW028026 for xxxxxxxxxxxx; Mon, 7 Mar 2005 15:09:06 GMT

Received: from [202.155.86.40] (helo=TAYANG) byxxxxxxxxxx (Exim: virusscanner) with smtp id 1D8JgN-0000HI-OY for xxxxxxxxxxxx; Mon, 07 Mar 2005 15:09:06 +0000

Received: from zzksvebn019.yeah.net (20.46.51.48) by p4-dok6.yeah.net with Microsoft SMTPSVC(5.0.2195.6824); Mon, 07 Mar 2005 10:49:26 -0400

Received: from Katharinemcb96mnt674o258x (40.244.40.160) by vphvyah2.yeah.net (InterMail vM.5.01.06.05 168-962-607-284-631-8488600) with SMTP id <138740873495174.AEOK416.bkohryo8408.yeah.net[at]haydenn3b5d636s> for xxxxxxxxxxxxxx; Mon, 07 Mar 2005 15:47:26 +0100

Message-Id: <8126dtp37bxf554$184878$l02fyo648[at]Katharineat77so832jy15pdh>

Mime-Version: 1.0

Content-Type: multipart/related; boundary="%OLATTACH1"

X-Scan-Signature: e809143705ea52d8427a69e1128b1c45

X-spam-Status: Yes, hits=6.2 required=5.0 tests=BAYES_99=5.4,FOR_FREE=0.592,HTML_FONTCOLOR_UNKNOWN=0.1,HTML_MESSAGE=0.1 autolearn=no version=2.64

X-spam-Level: ******

X-spam-Flag: YES

Content-Length: 61114

Share this post


Link to post
Share on other sites

Please post a Tracking URL. Thanks!

Share this post


Link to post
Share on other sites

Too much editing done on this last sample to really play with it, but I did actually get a parse result out of it.

Report spam to:

Re: 202.155.86.40 (Administrator of network where email originates)

To: abuse[at]indosat.net.id (Notes)

To: postmaster[at]indosat.net.id (Notes)

On the other hand, perhaps your "can't report" has some other meaning? For example, the "Content-Length" line isn't tagged as an "X-Line:" comment, so there is probably a failing in the body parsing part, going with the 'error' of no blank line between the body and header ...????

Share this post


Link to post
Share on other sites
Too much editing done on this last sample to really play with it, but I did actually get a parse result out of it.

Report spam to:

Re: 202.155.86.40 (Administrator of network where email originates)

   To: abuse[at]indosat.net.id (Notes)

   To: postmaster[at]indosat.net.id (Notes)

On the other hand, perhaps your "can't report" has some other meaning?  For example, the "Content-Length" line isn't tagged as an "X-Line:" comment, so there is probably a failing in the body parsing part, going with the 'error' of no blank line between the body and header ...????

25129[/snapback]

OK, so how do I get a 'Tracking URL' if I can't report it? Should I forward it someone? Also, excuse me for being paranoid, but the editing was simply to remove any information about me.....

Edited by gazza

Share this post


Link to post
Share on other sites
Please see the Tracking URL section in the SpamCop Glossary.

25164[/snapback]

To repeat, I can't get a tracking URL as I can't submit the spam e-mail to SpamCop in the first place. Please ignore the topic description - the problem appears to be with the SpamCop reporting plug-in in the OSX Mail application.

Edited by gazza

Share this post


Link to post
Share on other sites

What exact error message are you getting, from what system, and what have you tried already to resolve the problem?

Share this post


Link to post
Share on other sites
To repeat, I can't get a tracking URL as I can't submit the spam e-mail to SpamCop in the first place. Please ignore the topic description - the problem appears to be with the SpamCop reporting plug-in in the OSX Mail application.

This would be the Subsume package that the developer swore that no one could be confused over the SpamCop.net tool-set and his application for Apple-Mail SpamCop reporting???? ... the same individual that got into a bit of a disagreement with SpamCop Admin folks over his own reporting practices ... the last time I looked at the site, there was going to be no future development .. no idea what actual support is available from him these days ...

Share this post


Link to post
Share on other sites
What exact error message are you getting, from what system, and what have you tried already to resolve the problem?

25224[/snapback]

None at all - the e-mails just remain in my Junk folder. When I have the time I manually parse the headers and forward to the relevant ISP directly.

Share this post


Link to post
Share on other sites

Is "the SpamCop reporting plug-in in the OSX Mail application" supposed to automagically forward mail from your "Junk folder" for SpamCop Reporting?

What version of that application are you using, and exactly where did you get it?

Share this post


Link to post
Share on other sites
Is "the SpamCop reporting plug-in in the OSX Mail application" supposed to automagically forward mail from your "Junk folder" for SpamCop Reporting?

What version of that application are you using, and exactly where did you get it?

25312[/snapback]

SpamCop 1.3.1. I downloaded it from www.subsume.com over 16 months ago and it has worked fine for all versions of MacOSX up to 10.3, apart from the problem e-mails in question.

Has anyone who uses this utility had similar problems?

Share this post


Link to post
Share on other sites
SpamCop 1.3.1.  I downloaded it from www.subsume.com over 16 months ago and it has worked fine for all versions of MacOSX up to 10.3, apart from the problem e-mails in question.

Has anyone who uses this utility had similar problems?

Noting that you didn't respond to my query/guess that it was the tool from Subsume being used .... In the discussion with folks running into problems, I believe they will all have "subsume" in the dialog ... use that as a search item to wander through those other postings ...

Share this post


Link to post
Share on other sites

Which also goes back to post 11 from Wazoo in this thread giving you some of the history.

Subsume used the spamcop name against the wishes of spamcop's ownership, saying that hios tool would never be confused with this spamcop. Obviously, he was wrong again. As Wazoo also mentions, to our knowledge, that software has not been supported for a while now. Please contact subsume for your support question as nobody here has any connection with it.

Share this post


Link to post
Share on other sites
For historical purposes, here's one of those ancient threads ... look for the Subject Line: of;

[sC-Help] Since Jaguar Upgrade-SpamCop doesn't work

http://news.spamcop.net/pipermail/spamcop-...read.html#14394

noting that there are even a few more 'friendly' exchanges of ideas in that list <g>

25347[/snapback]

Looking at this old thread, it seems I re-opened a can of worms! Perhaps I'll carry on using the Subsume 'tool' to report spam from Apple's Mail, when it works - which is 99% of the time, and just ignore those it can't cope with.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×