Jump to content

"Can't parse date of spam for age detection"


Neil Parks
 Share

Recommended Posts

Please look at

http://www.spamcop.net/sc?id=z5458084753z8...fefa396f939e37z

Parsing header:

0: Received: from ri1.zoner.com ([217.198.113.91]) by inMail24.com (IceWarp 9.1.5-7) with SMTP id NOI33752; Mon, 28 Jan x 14:58:52 +0100

Hostname verified: ri1.zoner.com

inmail24 received mail from inmail24 ( 217.198.113.91 )

1: Received: from ri1.zoner.com (localhost [127.0.0.1]) by ri1.zoner.com (Postfix) with ESMTP id 9C15B38004861; Mon, 28 Jan x 14:58:39 x (CET)

Internal handoff at inmail24

2: Received: from a1modem (178-191-148-197.adsl.highway.telekom.at [178.191.148.197]) by ri1.zoner.com (Postfix) with ESMTP id 6CBD510003141; Mon, 28 Jan x 14:58:38 x (CET)

Hostname verified: 178-191-148-197.adsl.highway.telekom.at

inmail24 received mail from sending system 178.191.148.197

Can't parse date of spam for age detection: Mon, 28 Jan x 14:58:38 x

Please notice that the letter x has been inserted into the dates in the Received records.

This is how the same Received records appear in the original spam as I received it:

Received: from ri1.zoner.com ([217.198.113.91])

by inMail24.com (IceWarp 9.1.5-7) with SMTP id NOI33752;

Mon, 28 Jan 2013 14:58:52 +0100

Received: from ri1.zoner.com (localhost [127.0.0.1])

by ri1.zoner.com (Postfix) with ESMTP id 9C15B38004861;

Mon, 28 Jan 2013 14:58:39 +0100 (CET)

Received: from a1modem (178-191-148-197.adsl.highway.telekom.at [178.191.148.197])

by ri1.zoner.com (Postfix) with ESMTP id 6CBD510003141;

Mon, 28 Jan 2013 14:58:38 +0100 (CET)

The original spam also contained this Cc record:

Cc: <peakspeed19[at]inmail24.com>, <peter_ho[at]inmail24.com>;,

Mon[at]ri1.zoner.com, 28[at]ri1.zoner.com, Jan[at]ri1.zoner.com,

2013[at]ri1.zoner.com, "14:58:39"[at]ri1.zoner.com, +0100[at]ri1.zoner.com

Notice that the apparent addresses in the "n1.zoner.com" domain are actually components of the date and time!

To test whether this Cc record was affecting the Spamcop process, I resubmitted the spam with that one record--and ONLY that one record--removed.

The result can be found in:

http://www.spamcop.net/sc?id=z5458098409z5...f75cd686396f64z

This second submission was processed and reported successfully.

Link to comment
Share on other sites

Hi, Neil,

...Sorry to hear of your problem. Smarter people than I may happen by here with some help but if that doesn't happen in a timely enough manner for you, I would suggest that you contact the SpamCop deputies directly at e-mail address deputies[at]admin.spamcop.net.

...Good luck and thank you for reporting spam.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...