"SpamCop Encountered Errors"

[mrmaxx]

I just reported a BUNCH of spam via VER and it looks like SpamCop could not find the email in most of them. What's up with that??? Here's a cut/paste of one of the messages (raw, full-source of error message):

Return-Path: <"spamid."[at]bounces.spamcop.net>

Delivered-To: spamcop-net-mrmaxx[at]spamcop.net

Received: (qmail 2680 invoked from network); 6 Mar 2004 14:51:19 -0000

Received: from unknown (HELO mailgate.cesmail.net) (192.168.1.101)

by blade4.cesmail.net with SMTP; 6 Mar 2004 14:51:19 -0000

Received: (qmail 23957 invoked from network); 6 Mar 2004 14:51:19 -0000

Received: from victor1.ironport.com (HELO sc-app3.verio.ironport.com) (206.14.107.102)

by mailgate.cesmail.net with SMTP; 6 Mar 2004 14:51:19 -0000

Received: from spamcop.net (localhost [127.0.0.1])

by sc-app3.verio.ironport.com (Postfix) with SMTP id 0723E15689

for <mrmaxx[at]spamcop.net>; Sat, 6 Mar 2004 06:51:19 -0800 (PST)

From: SpamCop AutoResponder <spamcop[at]devnull.spamcop.net>

To: mrmaxx[at]spamcop.net

Subject: SpamCop encountered errors

Date: Sat, 06 Mar 2004 14:51:19 GMT

Message-ID: <ss4049e567gd8c4[at]msgid.spamcop.net>

In-Reply-To: <20040306094128.qpj9c4k0ogwcow4g[at]webmail.spamcop.net>

References: <20040306094128.qpj9c4k0ogwcow4g[at]webmail.spamcop.net>

X-spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on blade4

X-spam-Level:

X-spam-Status: hits=-100.0 tests=USER_IN_WHITELIST version=2.63

X-SpamCop-Checked: 192.168.1.101 206.14.107.102 127.0.0.1

Content-Type:

X-UID: 51483

SpamCop encountered errors while saving spam for processing:

SpamCop could not find your spam message in this email:

Received: from c60.cesmail.net (c60.cesmail.net [216.154.195.49])

by sc-app3.verio.ironport.com (Postfix) with ESMTP id 1C4F815778

for <ver.mrmaxx+spamcop.net-1078584088-05ada3e9b6b66a9106b84d5956a92ee9[at]spam.spamcop.net>; Sat, 6 Mar 2004 06:41:30 -0800 (PST)

Received: from unknown (HELO epsilon.cesmail.net) (192.168.1.40)

by c60.cesmail.net with SMTP; 06 Mar 2004 09:41:28 -0500

Received: (qmail 5604 invoked by uid 99); 6 Mar 2004 14:41:28 -0000

Message-ID: <20040306094128.qpj9c4k0ogwcow4g[at]webmail.spamcop.net>

Date: Sat, 6 Mar 2004 09:41:28 -0500

To: ver.mrmaxx+spamcop.net-1078584088-05ada3e9b6b66a9106b84d5956a92ee9[at]spam.spamcop.net

From: Maxx Excaliber <mrmaxx[at]spamcop.net>

Subject: spam Report from mrmaxx[at]spamcop.net

MIME-Version: 1.0

Content-Type: message/rfc822

User-Agent: Internet Messaging Program (IMP) 4.0-cvs

The email which triggered this auto-response had the following headers:

Received: from c60.cesmail.net (c60.cesmail.net [216.154.195.49])

by sc-app3.verio.ironport.com (Postfix) with ESMTP id 1C4F815778

for <ver.mrmaxx+spamcop.net-1078584088-05ada3e9b6b66a9106b84d5956a92ee9[at]spam.spamcop.net>; Sat, 6 Mar 2004 06:41:30 -0800 (PST)

Received: from unknown (HELO epsilon.cesmail.net) (192.168.1.40)

by c60.cesmail.net with SMTP; 06 Mar 2004 09:41:28 -0500

Received: (qmail 5604 invoked by uid 99); 6 Mar 2004 14:41:28 -0000

Message-ID: <20040306094128.qpj9c4k0ogwcow4g[at]webmail.spamcop.net>

Date: Sat, 6 Mar 2004 09:41:28 -0500

To: ver.mrmaxx+spamcop.net-1078584088-05ada3e9b6b66a9106b84d5956a92ee9[at]spam.spamcop.net

From: Maxx Excaliber <mrmaxx[at]spamcop.net>

Subject: spam Report from mrmaxx[at]spamcop.net

MIME-Version: 1.0

Content-Type: message/rfc822

User-Agent: Internet Messaging Program (IMP) 4.0-cvs

[end of email]

Now, I won't swear that all these messages actually had a body, but I don't think THAT many did NOT have a body... Is it just me, or is SpamCop having a bad Saturday morning???

[Farelf]

I was hoping someone with actual knowledge might have picked this up before now, mrmaxx (not being a spamcop email account user myself and not having a clue as to the capabilities of the "Very Easy Reporting" system you're using), and can't see that it's been addressed on another forum. I presume you have checked out the FAQ? The starting point would be:

http://www.spamcop.net/fom-serve/cache/335.html

I know one of the reasons I had to quit email reporting was because my email "forwarded as attachment" frequently lead to the same dreaded message "SpamCop could not find your spam message in this email" which you're seeing. I tried pasting to my keyed submission box in spamcop.net and finally, with pasting the "page source", had 100% success in getting my spam fully processed, including the URL links to spamvertisements.

As for spam with no viewable body, I have noticed this happens with my (early) Netscape application when the page source shows declared boundaries but the post-header section is malformed by the omission of a line break before the boundary - that is, when it is like this fragment:

Content-Type: multipart/alternative;

boundary="--21559756486133000"

X-Priority: 3

X-MSMail-Priority: Normal

X-IP:245.25.170.248

----21559756486133000

Content-Type: text/html;

The body is actually readable when this is like:

Content-Type: multipart/alternative;

boundary="--21559756486133000"

X-Priority: 3

X-MSMail-Priority: Normal

X-IP: 245.25.170.248

----21559756486133000

Content-Type: text/html;

Presumably there *are* viewers/email applications apart from Netscape Messenger which can view the original version (or else spamdom contains elements more stupid than seems compatible with the ordinary rigours of natural selection) but spamcop can't parse the body either, producing a different processing error.

[Wazoo]

Good data Farelf, but "we" don't know what the real background to mrmaxx's situation might be. As there's a mrmaxx posting for quite a while over in the newsgroups, I was waiting to see if this was the same person ... Thinking that if it was, he'd know that posting the headers of the error response doesn't say anything critical about the actual spam submitted that caused the error.

So, having to go with that this is another user that chose a dulicate posting ID, in theory, using VER shouldn't involve the user's system all that much, other than doing the drag-n-drop or clicking on things. In that light, this memaxx could have just received a glut of spam from a particular source that "we" haven't figured out ... does the spammer have bad software, is said spammer really screwing up the spew intentionally perhaps for checking good/bad addresses, is spammer just a total idiot, or recently suggested -- spammer is trying to inject through a compromised system that is hosed ... specific characteristic is a very short message ID, last headers lines screwed up (mashed together) ...

But,"we" can't tell what the issue is until this mrmaxx would post the headers of the actual spam in question, which is probably impossible at this point due to the way VER works ...

[mrmaxx]

Wazoo... I am the same MrMaxx from the newsgroups. And yes, I know that posting the error message wasn't likely to help, but my wife is VERY protective of our time together on weekends, and I barely had time to post what I did. :-)

That being said, I got about 250 of those darn messages... I *do* wonder if I don't already know the answer... Friday night I started to report spam but only got as far as opening my held folder. Saturday I returned and started to report spam, only to find that my login had timed out and I had to log back in. However, this was after I'd tried to report the first page (250 messages) of held spam messages.... OTOH, I would have assumed that I wouldn't get *anything*, that the spams would not have been reported if the login had timed out, so I don't know. I can try to dig up one of the spams and repost headers and a snippet of the body here...Well, I'm not sure what got through and what didn't... I'm afraid this is going to remain an unsolved mystery. Mainly posted here to see if anyone else was having this problem.

Thanks though!

[Jeff G.]

I get messages like this (empty "Quick Report" submissions) on an intermittent basis. I haven't gotten one since 2/27, and I've reported around 6000 spams since then.