novice user getting one word spams

[alexxy]

hi all,

spamcop has worked amazingly for me, h/e ive been receiving one word spams lately also (hi or hey) that when i report them, they cant be tracked.

would someone advise me... keep in mind, im still a novice & wasnt following prior

post replies.

thanks

spamcop's reply:

"No source IP address found, cannot proceed.

Add/edit your mailhost configuration

Finding full email headers

Submitting spam via email (may work better)

Example: What spam headers should look like

No tracking information found in header:

Return-Path: <beau_small[at]abraxis.com>

X-Original-To: x

Delivered-To: x

X-AV-Checked: Sun Jun 5 12:08:21 2005 clean

From: "beau_small" <beau_small[at]abraxis.com>

To: <x>

Cc: x <x>,

<x>, <x>,

<x>, <x>, <x>

Subject: hey

Date: Sun, 05 Jun 2005 13:08:19 -0500

MIME-Version: 1.0

Content-Type: text/plain;

charset="-us-ascii"

Message-Id: <2005_________________EE9D[at]mx.velocity.net>

X-spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on

spamscan02.velocity.net

X-spam-Level:

X-spam-Status: No, score=-2.4 required=3.0 tests=ALL_TRUSTED,

DNS_FROM_RFC_ABUSE autolearn=disabled version=3.0.2Probably not full headers - see FAQ:

Email software FAQ

no header

Here is your TRACKING URL - it may be saved for future reference:

http://www.spamcop.net/sc?id=z773550670zb1...f3f776fe7bc519z "

[Farelf]

You're using Outlook alexxy? Hopefully some Outlook user will drop by and offer some pointers - I must confess I have never been able to make head or tail of the reporting procedure using that application.

But some generalities ... your one word spam very likely contains a heap of HTML and/or graphics which you're just not seeing (having very sensibly stuck with "text only" mode). Even if it does not display, you need to paste/forward the source for a full parse. Here is link to a report of a spam which includes the HTML:

http://www.spamcop.net/sc?id=z773574912z88...;action=display

This also shows the full headers which are needed for parsing, but which your submissions seem to be lacking. That's a seperate issue with Outlook and one someone will hopefully help you to resolve. But at least you can see what they *should* look like.

The other issue is, your tracking URL is broken - instead of the full ID hash, you have an ellipsis in the middle. Just copy and paste it without editing, at least without editing the link part (as distinct from the display part), Mine will also *display* like that (it's a default for the display form), but you will find the full hash is actually present.

Not much for you to work with so far, but it's a start. I assume you've looked at the forum FAQs, particularly http://forum.spamcop.net/forums/index.php?showtopic=2385 which is just one which might be helpful at http://forum.spamcop.net/forums/index.php?showtopic=2238

Good luck

[added]

Just noticed you said you use OE6 in another post

Relevant matters seem to be dealt with in great detail by Wazoo and others in

http://forum.spamcop.net/forums/index.php?showforum=15

particularly

http://forum.spamcop.net/forums/index.php?showtopic=3571

and

http://forum.spamcop.net/forums/index.php?showtopic=3518

I think you will need to tell precisely how these *don't* address and remedy your problems before any further suggestions might be offered - just an opinion ;-]

[alexxy]

The other issue is, your tracking URL is broken - instead of the full ID hash, you have an ellipsis in the middle.  Just copy and paste it without editing, at least without editing the link part (as distinct from the display part),  Mine will also *display* like that (it's a default for the display form), but you will find the full hash is actually present.

i did just copy & paste it - i never edit.

[alexxy]

i did just copy & paste it - i never edit.

29153[/snapback]

also, i just read those links & it appears that i'm following proper procedure in revealing data in email & reporting to spamcop. so, hopefully that suffices your request to let you know how these links *don't* answer my question before the effort of a suggestion is offered. ;-]

im at a loss as to how to reveal more info. maybe someone familiar with OE6 & hopefully patient would help me out here.

thanks

[swingspacers]

As Farelf said, your tracking URL is broken. Try to click on the URL you posted. You will only get an error message. Please post a working tracking URL so that the good folks here can try to help you.

[Jeff G.]

also, i just read those links & it appears that i'm following proper procedure in revealing data in email & reporting to spamcop.

29154[/snapback]

Appearances can be deceiving. Please follow the advice in those links EXACTLY, as SpamCop's Parser can't do anything with a spam that has no Received Header Lines. Thanks!

[Wazoo]

The last Alexxy I knew was the little brother of a foreign exchange student I was assisting here ... that Alexxy was actually born in Chernobyl, was living then in Odessa, and last I heard was living in Holland. What I'm shooting for here is to suggest that there may be a language issue involved ...???

Tracking URL --- i did just copy & paste it - i never edit.

What you need to do is use the "Copy Shortcut" function in this case. What is happening is exactly the same thing I tried to explain in http://forum.spamcop.net/forums/index.php?showtopic=3571 .. what you "see displayed" is not the "actual code" used to create that display.

Based on what you offered as a "sample" of your spam, you are not getting to the "Display Source" screen in order to collect the entire header/body data before it has been rendered as HTML ...

[Jeff G.]

"Display Source"

29159[/snapback]

My copy of OE6 calls the window "Message Source".

[Jeff G.]

Per a PM from alexxy, the Tracking URL is http://www.spamcop.net/sc?id=z774158638z7b...8abf98ffe30909z. It gets me wondering what kind of fouled-up system alexxy is retrieving email from. There are Header Lines, but no Received Header Lines.

[StevenUnderwood]

It gets me wondering what kind of fouled-up system alexxy is retrieving email from.  There are Header Lines, but no Received Header Lines.

29170[/snapback]

Maybe some ISP has decided it's customers don't need email headers and strip them? The only other way I see that message ending up in the users mailbox is that someone at the ISP put it there.

[turetzsr]

also, i just read those links & it appears that i'm following proper procedure in revealing data in email & reporting to spamcop.  so, hopefully that suffices your request to let you know how these links *don't* answer my question before the effort of a suggestion is offered. ;-]

im at a loss as to how to reveal more info. maybe someone familiar with OE6 & hopefully patient would help me out here.

thanks

29154[/snapback]

Hi, Alexxy!

...As the message suggested, you may have more luck submitting your spam via e-mail. Instructions are here.

[Farelf]

Per a PM from alexxy, the Tracking URL is http://www.spamcop.net/sc?id=z774158638z7b...8abf98ffe30909z.  It gets me wondering what kind of fouled-up system alexxy is retrieving email from.  There are Header Lines, but no Received Header Lines.

29170[/snapback]

Hmmm ... I know nothing about OE6 but just fired it up for a trial. A couple of fresh spam obligingly POPed into my Norton Anti spam folder from my AT&T account.

To recapitiulate the process -

Right click on one of the messages

Select "Properties" from the drop-down menu

Hit the "Details" tab

Click on the "Message Source" button

Select inside the resulting window and Ctrl-A to select all

Ctrl-C to copy

Switch to the paste-in window on my members.spamcop.net "Welcome" page

Ctrl-V to paste

Hit the "Process spam" button.

After reporting: http://www.spamcop.net/sc?id=z774496365z8d...8d070ccb499fc6z

Unsurprisingly, it all workered perfectly. If this is the sort of process that alexxy is following and getting the results seen in the link PM'd to Jeff G then the ISP is certainly providing a non-standard service and should be approached. If, however, alexxy can get similar results on paste-in and the problem only arises with email forwarding then it looks more like an application issue (with the forwarding of HTML emails maybe).

Sorry to be so long-winded (maybe treading on your toes alexxy, not intended) but we could be missing something basic here.

[turetzsr]

Hi, Alexxy!

...As the message suggested, you may have more luck submitting your spam via e-mail.  Instructions are here.

29198[/snapback]

...Alexxy PM-ed me with a follow-up that showed that he got the same result (freaky, incomplete internet headers) when he submitted spam to SpamCop via e-mail.

...Also, after more carefully re-reading one of his earlier posts, I noticed that he is using OE, whereas the instructions to which I pointed were for Outlook! I presume he was able to figure out how to make OE forward as attachment.

[Wazoo]

...Also, after more carefully re-reading one of his earlier posts, I noticed that he is using OE, whereas the instructions to which I pointed were for Outlook!  I presume he was able to figure out how to make OE forward as attachment.

That's pretty hard to say ... there are multiple pointers to the FAQ, the "How to .... Report" stuff to which he stated none of that applied .. and I note that one of those was specifically an Outlook Express tutorial ....???? I find it a bit distressing that alexxy is PM'ing the heck out of folks, rather than actually supplying data and answers in the Topic he started.

[Farelf]

... alexxy is PM'ing the heck out of folks, rather than actually supplying data and answers in the Topic he started.

29231[/snapback]

Hardly a "forum" under such circumstances it is true but, from the clues provided, it appears alexxy's issue may be with the ISP who should then be approached to see if there are any configuration settings which might be tweaked to provide a "regular" service for all messages to (his?) account, particularly inclusion of the "Received" header lines. As we are, hopefully, united in our fight against spam, maybe alexxy will come back in due course with further progress to update the knowledge base we all need for the fight. Who knows, this could be another manifestation of the "IP not found" thing - http://forum.spamcop.net/forums/index.php?showtopic=4084# - but with the ISP "clued" enough to suppress the evidence?