Jeff G. Posted February 1, 2004 Share Posted February 1, 2004 Quick Reporting allows the reporting of only spam sources, very quickly. Please see the WARNING: below about the danger of such speed. Note: for those that would rather read a simpler, less detailed description of Quick Reporting see the following entry in the Wiki: QuickReporting The following is a detailed description of Quick Reporting and its Dangers: Emphasis: ONLY the spam source Nothing in the body of the spam is even looked at by the parsing engine. Further explanatory notes found at Is quick-reporting still BETA? Some procedural issues are addressed by Julian at Mailhosts and Quick Reporting Email-based Quick Reporting is a feature of the SpamCop Parsing and Reporting System which may be allowed on a case-by-case basis by a SpamCop Admin. Please see To Quick Report via email (Linear Post #2 below) for details on using it. Web-based Quick Reporting is an exclusive feature of the SpamCop Parsing and Reporting System which only SpamCop Email System Customers may access, and which can currently be used from both Systems' websites. On the SpamCop Parsing and Reporting System, that feature is part of what is variously known as VER (Very Easy Reporting), Held Email, Held Mail Log, held log, and heldlog, and in all cases resides at http://mailsc.spamcop.net/reportheld?action=heldlog. It can accessed via the "HeldMail" Button/Link in the menu bar of the SpamCop Parsing and Reporting System http://mailsc.spamcop.net/ (which can be accessed via the "Report spam" Button/Link in Webmail) and has six Actions as follows: Â VER Action Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Webmail Capability Â ~~~~~~~~~~ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â ~~~~~~~~~~~~~~~~~~ Â Quick - report immediately and trash Â Â "Report as spam" Â Queue for reporting (and move to trash) Â In Progress Â Queue for reporting (do not trash) Â Â Â In Progress Â Forward (and whitelist sender) Â Â Â Â Â "Release and Whitelist" Â Forward (do not whitelist sender) Â Â Â Â Release (or Move or Open and Redirect) Â Delete Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Delete To "Queue for reporting" from Webmail, forward (from the message list interface only, not when viewing any particular message) to your confidential submit.16charANcodeNMBR[at]spam.spamcop.net address (your Confidential Submit Address). However Quick Reporting happens, it will produce one or more "SpamCop Quick reporting data" email messages similar to the following: Return-Path: <user.mkWcYgeVzP7tz6z6[at]bounces.spamcop.net> Delivered-To: x[at]spamcop.net Received: (qmail 15696 invoked from network); 28 Sep 2005 21:05:34 -0000 Received: from unknown (192.168.1.103) by blade3.cesmail.net with QMQP; 28 Sep 2005 21:05:34 -0000 Received: from vmx1.spamcop.net (22.214.171.124) by mx53.cesmail.net with SMTP; 28 Sep 2005 21:03:08 -0000 Received: from sc-app5.ironport.com (HELO spamcop.net) (126.96.36.199) by vmx1.spamcop.net with SMTP; 28 Sep 2005 14:03:02 -0700 Wrom: GPKYLEJGDGVCJVTLBXFGGMEPYOQKEDOTWFAOBUZX To: x <x[at]spamcop.net> Subject: SpamCop Quick reporting data Precedence: list Message-ID: <qr433b0506g7533[at]msgid.spamcop.net> Date: Wed, 28 Sep 2005 21:03:02 GMT X-Mailer: [url="http://www.spamcop.net/"]http://www.spamcop.net/[/url] v1.493 X-spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on blade3.cesmail.net X-spam-Level: X-spam-Status: hits=-98.1 tests=AWL,FORGED_RCVD_HELO,J_CHICKENPOX_63, J_CHICKENPOX_73,J_CHICKENPOX_75,USER_IN_WHITELIST version=3.0.2 X-SpamCop-Checked: 192.168.1.103 188.8.131.52 184.108.40.206 ... SpamCop.net Here are the results of your submission: Processing spam: Wrom: UWLSZLKBRNVWWCUFPEGAUTFJMVRESK Subject: ATTN: BENEFICIAL PREPOSITION Received: (qmail 32070 invoked from network); 28 Sep 2005 15:55:23 -0000 warning:Ignored Received: from unknown (192.168.1.101) by blade2.cesmail.net with QMQP; 28 Sep 2005 15:55:23 -0000 192.168.1.101 found host 192.168.1.101 (getting name) no name host 192.168.1.101 = ip192-168-1-101.z1-168-192.customer.algx.net (old cache) warning:192.168.1.101 discarded Received: from mail-kr.bigfoot.com (220.127.116.11) by mailgate.cesmail.net with SMTP; 28 Sep 2005 15:55:23 -0000 18.104.22.168 found host 22.214.171.124 = mail-kr.bigfoot.com (cached) mail-kr.bigfoot.com is 126.96.36.199 Possible spammer: 188.8.131.52 Received line accepted Relay trusted (184.108.40.206) Received: from hotmail.com ([220.127.116.11]) by BFLITEMAIL-KR3.bigfoot.com (LiteMail v3.03 (BFLITEMAIL-KR3)) with SMTP id 0509281145_BFLITEMAIL-KR3_464317_53569328; Wed, 28 Sep 2005 11:51:06 -0400 EST 18.104.22.168 found host 22.214.171.124 = bay15-f21.bay15.hotmail.com (cached) bay15-f21.bay15.hotmail.com is 126.96.36.199 Possible spammer: 188.8.131.52 Possible relay: 184.108.40.206 220.127.116.11 not listed in relays.ordb.org. 18.104.22.168 has already been sent to relay testers Received line accepted Relay trusted (hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Wed, 28 Sep 2005 08:50:58 -0700 warning:Ignored Received: from 22.214.171.124 by by15fd.bay15.hotmail.msn.com with HTTP; Wed, 28 Sep 2005 15:50:58 GMT 126.96.36.199 found host 188.8.131.52 = unknown.Level3.net (cached) Possible spammer: 184.108.40.206 Possible relay: 220.127.116.11 18.104.22.168 not listed in relays.ordb.org. 22.214.171.124 has already been sent to relay testers Received line accepted Sender relay: 126.96.36.199 De-referencing level3.net[at]abuse.net abuse net level3.net = abuse[at]level3.net, spamtool[at]level3.net Report routing for 188.8.131.52: abuse[at]level3.net, spamtool[at]level3.net abuse[at]level3.net redirects to level3[at]admin.spamcop.net spamtool[at]level3.net redirects to level3[at]admin.spamcop.net Tracking message source:184.108.40.206: Report routing for 220.127.116.11: emperion.net[at]devnull.spamcop.net Message is 5 hours old 18.104.22.168 not listed in dnsbl.njabl.org 22.214.171.124 not listed in dnsbl.njabl.org 126.96.36.199 not listed in cbl.abuseat.org 188.8.131.52 not listed in dnsbl.sorbs.net 184.108.40.206 not listed in relays.ordb.org. /dev/null'ing report for emperion.net[at]devnull.spamcop.net May be saved for future reference: [url="http://www.spamcop.net/sc?id=z810205604z2434444f7217f4c47d6e96388a8c07c6z"]http://www.spamcop.net/sc?id=z810205604z24...6e96388a8c07c6z[/url] Processing spam: From: ycorditej[at]mailpride.com...[/CODEBOX] [color=red]WARNING:[/color] Like its counterpart of normal Reporting, Quick Reporting also allows the reporting of you to your ISP or of your ISP to your ISP's ISP (both Very Bad Things), but in a more dangerous manner because it is faster and there is no verification step. Your ISP probably has various "solutions" in its arsenal to stop you from Quick Reporting yourself or it, including friendly advice, warning, suspension, deactivation, termination, fines, and even lawsuits for breach of contract, defamation, and/or interference with a contractual relationship. PLEASE make sure that your normal Reporting is working well for an extended period (never offering to report you to your ISP or your ISP to your ISP's ISP) before venturing into Quick Reporting. PLEASE also review your "SpamCop Quick reporting data" email messages to ensure that your Reports are not going to the wrong places. Please see FAQ Entry: What is VER (Very Easy Reporting)? for details on VER (Very Easy Reporting). Please see http://mail.spamcop.net/individuals.php for details on signing up for the SpamCop Email System. For addiltional official uptodate comments by SpamCop Admin see the following post http://forum.spamcop.net/forums/index.php?...ost&p=37352 posted on December 7, 2005 2004/03/22 [Wazoo] Updated to reflect new "Release" Links and "Queue for reporting" workaround. Edit: 2005/09/19 08:40 EDT -0400 Jeff G. updated with more info on email-based Quick Reporting (including reference to the Post below) and clarified some other language. Edit: 2005/09/28 00:04 EDT -0400 Jeff G. added access hints for VER, a caution for quick reporting via email, and a link to the new "FAQ Entry: What is VER (Very Easy Reporting)?". Edit: 2005/09/28 10:06 EDT -0400 Jeff G. added the [color=red]WARNING[/color] (thanks to Steve T for bringing it up). Edit: 2005/09/28 17:54 EDT -0400 Jeff G. added info about the the "SpamCop Quick reporting data" email messages to the body and the [color=red]WARNING[/color] (thanks to Steven Underwood and again to Steve T for bringing it up). Edit: 2005/12/06 11:05 PST -0800 dbiel added link to Don's December 7th post on the topic of Quick Reporting Edit: 2006/09/03 - [Wazoo] shortend up the long Received: Lines in the [ code box ] section to resolve a user complaint of having to scroll horizintally to read this Topic/Discussion .... Edit: 2006/12/14 - [Dbiel] added link to Wiki entry near the beginning of this post Link to comment Share on other sites More sharing options...
This topic is now archived and is closed to further replies.