Jerich0 Posted September 9, 2004 Share Posted September 9, 2004 Having just reported a spam, I was surprised that the reported-to list did not include Yahoo... examing the headers, I noticed that Yahoo seems to have included a "Received:" line for the IP [188.8.131.52] that apparantly connected to Yahoo's mail server to initiate the email (note the "via HTTP" in this line). The SpamCop parser accepted the final Received line as valid, reporting to the connecting IP domain (HawaiiTeleport.com) and not to the Yahoo domain which apparantly inserted the email onto the internet. I followed up with a manual submission to Yahoo abuse (aka customer "care"), however: 1. If SpamCop is not going to report to Yahoo, it should be listed with something like "does not accept reports" so that SpamCop users are informed 2. If SpamCop is being mislead by Yahoo's additional Received line (results in ignoring Yahoo as part of the spamming process), perhaps an upgrade is needed to the parser/reporting process. Is this a problem, or a known "thing" (I didn't find any mention)? submitted report Original headers: NB: The email was sent to [at]Chamber... whose ISP (TigerTech) redirected it to a mailbox at SneakEmail who redirected it to Adelphia... this is normal. The "From:" is as delivered to me, and normal for SneakEmail (it permits anon replies), the apparant actual sourcing email address is "raharjo agus" <raharjo_agus2005[at]yahoo.com> which is what I reported to Yahoo. From - Wed Sep 08 16:33:52 2004 X-UIDL: <20040908034119.36165.qmail[at]web53403.mail.yahoo.com> X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: <YYYmungedYYY[at]sneakemail.com> Received: from monkey.sneakemail.com ([184.108.40.206]) by mta6.adelphia.net (InterMail vM.6.01.03.02 201-2131-111-104-20040324) with SMTP id <20040908034124.WMUB23168.mta6.adelphia.net[at]monkey.sneakemail.com>; Tue, 7 Sep 2004 23:41:24 -0400 Received: (qmail 11695 invoked by uid 501); 8 Sep 2004 03:41:23 -0000 Received: from fry.tigertech.net (HELO fry.tigertech.net) (220.127.116.11) by mail.sneakemail.com with SMTP; 8 Sep 2004 03:41:23 -0000 Received: from localhost (localhost [127.0.0.1]) by fry.tigertech.net (Postfix) with ESMTP id 37CF53FC055 for <XXmungedXX[at]ChamberOrchestraOfTheSprings.org>; Tue, 7 Sep 2004 20:41:22 -0700 (PDT) Received: from web53403.mail.yahoo.com (web53403.mail.yahoo.com [18.104.22.168]) by fry.tigertech.net (Postfix) with SMTP id 6737C3FC041 for <XXmungedXX[at]ChamberOrchestraOfTheSprings.org>; Tue, 7 Sep 2004 20:41:20 -0700 (PDT) Message-ID: <20040908034119.36165.qmail[at]web53403.mail.yahoo.com> Received: from [22.214.171.124] by web53403.mail.yahoo.com via HTTP; Tue, 07 Sep 2004 20:41:19 PDT Date: Tue, 7 Sep 2004 20:41:19 -0700 (PDT) From: "raharjo agus raharjo_agus2005-at-yahoo.com |COS|" <YYYmungedYYY[at]sneakemail.com> Subject: catalog via letter,please.I am wholesale Link to comment Share on other sites More sharing options...
This topic is now archived and is closed to further replies.