Jump to content

Forging received dates?


elind

Recommended Posts

I received a spam with wrong dates. The receive date was today, 7/25/05, but other dates were 7/21/05, thereby causing Spamcop to reject the report as too old.

Surely it cannot be that simple to avoid Spamcop reports or everyone would do it.

I didn't want to publish the emails here, but the key change lines look like this:

by c60.cesmail.net with SMTP; Mon, 25 Jul 2005 21:37:04 -0400

Received: (qmail 25869 invoked by uid 1010); Thu, 21 Jul 2005 17:20:59 +0000

Received: (qmail 25657 invoked from network); Thu, 21 Jul 2005 17:20:49 +0000

Before these lines is 7/25/05, after is 7/21/05

Any explanation?

Link to comment
Share on other sites

  • 2 weeks later...
With the limited data presented, it could be another host that had a problem holding messages as well.

30706[/snapback]

I received another of these today, and the common factor is that they get past the filter that catches 99.9% of all others. I'd be happy to provide detail, but I don't know how to do that without publishing all addresses.

(PS. How come I never receive email notice that anyone has replied to my posts even though this page says I do?)

Link to comment
Share on other sites

I received another of these today, and the common factor is that they get past the filter that catches 99.9% of all others. I'd be happy to provide detail, but I don't know how to do that without publishing all addresses.

Use of a Tracking URL would be the norm. Check the Glossary here via the FAQ if needed.

(PS. How come I never receive email notice that anyone has replied to my posts even though this page says I do?)

31194[/snapback]

Not sure of your subscription settings. The announcements section has an entry dealing with Forum e-mail .... just checked the logs, and see that there are 10 more new errors since 29 July (JT notified) .. but I don't see your address in that list of failed e-mail attempts. I believe dbiel had also added a comment in the "How to use .... SpamCop Forum" in an entry about Topic/Forum subscriptions that may offer something to try.

Link to comment
Share on other sites

How come I never receive email notice that anyone has replied to my posts even though this page says I do?

31194[/snapback]

You do realize that you have to logout of here for that to happen, right? :)
Link to comment
Share on other sites

You do realize that you have to logout of here for that to happen, right? :)

31203[/snapback]

Duhh! No. I figured the system would know that when I went back to google it was a logout. I'll try it this time. Please reply.

Link to comment
Share on other sites

I didn't want to publish the emails here, but the key change lines look like this:

30688[/snapback]

I appreciate you not wanting to publish the full Email but what about the full headers with any identifying marks munged? That might help understanding the chronology of the message.

Andrew

Link to comment
Share on other sites

I appreciate you not wanting to publish the full Email but what about the full headers with any identifying marks munged?  That might help understanding the chronology of the message.

Andrew

31315[/snapback]

I think I've deleted those, but I'll try to do that if I get more. Thanks (PS I get notification now that I log out!) All these years and I never knew.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...