Jump to content

Errors in fwd spam-messages to SpamCop


Surfer

Recommended Posts

Posted

Sorry , but I don't know English language.

I can't report any spam messages.

Errors like this :

SpamCop encountered errors while saving spam for processing:
SpamCop could not find your spam message in this email:

Return-Path: <------[at]gmail.com>
Received: from sc-smtp1-bulkmx.soma.ironport.com (sc-smtp1-bulkmx.soma.ironport.com [204.15.82.123])
	   by sc-app7.soma.ironport.com (Postfix) with ESMTP id 5B16F2F98B
	   for <submit.------[at]spam.spamcop.net>; Fri, 17 Nov 2006 09:55:47 -0800 (PST)
Received: from py-out-1112.google.com ([64.233.166.179])
 by sc-smtp1-bulkmx.soma.ironport.com with ESMTP; 17 Nov 2006 09:54:39 -0800
Received: by py-out-1112.google.com with SMTP id d32so568580pye
	   for <submit.------[at]spam.spamcop.net>; Fri, 17 Nov 2006 09:54:39 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	   s=beta; d=gmail.com;
	   h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references;
	   b=uJlb5EKAqiTVmTCf5FRlX4dnvXz9h76d6DdcJ+jTC0sYJ0lqK5kaYNxdtmTQG5sZnRLYvtX/wXq0bAnfil7h/K7BZq87MPJEnzGZjLVWDdZIuqnpeZDxuU+tyaRF4UMF9qxAcXeoyx1hhaEo2BEv2zEuZ0e07dHgWW4V4GQ397s=
Received: by 10.35.20.14 with SMTP id x14mr3624582pyi.1163786078926;
	   Fri, 17 Nov 2006 09:54:38 -0800 (PST)
Received: by 10.35.116.20 with HTTP; Fri, 17 Nov 2006 09:54:38 -0800 (PST)
Message-ID: <77a13e150611170954i3b806885u3ba5895b891b1f42[at]mail.gmail.com>
Date: Fri, 17 Nov 2006 22:54:38 +0500
From: "=?KOI8-R?B?78zFxyDzo9LGxdI=?=" <------[at]gmail.com>
To: submit.------[at]spam.spamcop.net
Subject: Fwd: FROM $69 VIAGRA, CIALIS, XANAX, VALIUM & ALL MEDICATIONS servants day
In-Reply-To: <8991D443.179023.21622[at]MALR>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	   boundary="----=_Part_19180_3318867.1163786078886"
References: <8991D443.179023.21622[at]MALR>

------=_Part_19180_3318867.1163786078886
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

---------- Forwarded message ----------
From: LowestPriceMeds OnNet <stay3f[at]swva.net>
Date: 17.11.2006 11:31
Subject: FROM $69 VIAGRA, CIALIS, XANAX, VALIUM & ALL MEDICATIONS servants
day
To: ------[at]gmail.com

 east advantage near pay certain? follow use mischievous gray obliged
length. happen lady showed board effect.  *BestSellingMedsFrom$69*
No Question form to fill
WeShipTo all countries
*q C1ick here to 0rdder
y*<http://www.google.com/url?q=%68%74%74%70%3A%2F%2F%63%64e%6e%73a%66%75n%68e%73.c%6f%6d>
yours necessary shining thats. you with prison.

------=_Part_19180_3318867.1163786078886
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

<br><br>---------- Forwarded message ----------<br><span class="gmail_quote">From: <b class="gmail_sendername">LowestPriceMeds OnNet</b> <<a href="mailto:stay3f[at]swva.net">stay3f[at]swva.net</a>><br>Date: 17.11.2006 11:31
<br>Subject: FROM $69 VIAGRA, CIALIS, XANAX, VALIUM & ALL MEDICATIONS servants day<br>To: <a href="mailto:------[at]gmail.com">------[at]gmail.com</a><br><br></span>



<div>
<font color="#fdfcfd" size="1">east advantage near pay certain? follow use mischievous gray obliged length. happen lady showed board effect.</font>
<center><table border="1" cellpadding="5" cellspacing="1" width="520">
<tbody><tr><td bgcolor="#e4fea9"><center>
<font color="#ff2222" size="5"><b>BestSellingMedsFrom$69</b></font><br><font color="#00a854" size="4">No Question form to fill<br><font color="#8c8c46">WeShipTo all countries</font></font></center><br><center>
<a href="http://www.google.com/url?q=%68%74%74%70%3A%2F%2F%63%64e%6e%73a%66%75n%68e%73.c%6f%6d" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)"><font color="#0000f9" size="5"><u>q <b>C1ick here to 0rdder
</b> y</u></font></a></center><br></td></tr></tbody></table><font color="#fdfcfd" size="1">yours necessary shining thats. you with prison.</font>
</center></div>


------=_Part_19180_3318867.1163786078886--


The email which triggered this auto-response had the following headers:
 Return-Path: <------[at]gmail.com>
Received: from sc-smtp1-bulkmx.soma.ironport.com (sc-smtp1-bulkmx.soma.ironport.com [204.15.82.123])
	   by sc-app7.soma.ironport.com (Postfix) with ESMTP id 5B16F2F98B
	   for <submit.------[at]spam.spamcop.net>; Fri, 17 Nov 2006 09:55:47 -0800 (PST)
Received: from py-out-1112.google.com ([64.233.166.179])
 by sc-smtp1-bulkmx.soma.ironport.com with ESMTP; 17 Nov 2006 09:54:39 -0800
Received: by py-out-1112.google.com with SMTP id d32so568580pye
	   for <submit.------[at]spam.spamcop.net>; Fri, 17 Nov 2006 09:54:39 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	   s=beta; d=gmail.com;
	   h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references;
	   b=uJlb5EKAqiTVmTCf5FRlX4dnvXz9h76d6DdcJ+jTC0sYJ0lqK5kaYNxdtmTQG5sZnRLYvtX/wXq0bAnfil7h/K7BZq87MPJEnzGZjLVWDdZIuqnpeZDxuU+tyaRF4UMF9qxAcXeoyx1hhaEo2BEv2zEuZ0e07dHgWW4V4GQ397s=
Received: by 10.35.20.14 with SMTP id x14mr3624582pyi.1163786078926;
	   Fri, 17 Nov 2006 09:54:38 -0800 (PST)
Received: by 10.35.116.20 with HTTP; Fri, 17 Nov 2006 09:54:38 -0800 (PST)
Message-ID: <77a13e150611170954i3b806885u3ba5895b891b1f42[at]mail.gmail.com>
Date: Fri, 17 Nov 2006 22:54:38 +0500
From: "=?KOI8-R?B?78zFxyDzo9LGxdI=?=" <------[at]gmail.com>
To: submit.------[at]spam.spamcop.net
Subject: Fwd: FROM $69 VIAGRA, CIALIS, XANAX, VALIUM & ALL MEDICATIONS servants day
In-Reply-To: <8991D443.179023.21622[at]MALR>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	   boundary="----=_Part_19180_3318867.1163786078886"
References: <8991D443.179023.21622[at]MALR>

Posted

The only headers I see that are not 'from' SpamCop.net (IronPort) are the following lines;

---------- Forwarded message ----------

From: LowestPriceMeds OnNet <stay3f[at]swva.net>

Date: 17.11.2006 11:31

Subject: FROM $69 VIAGRA, CIALIS, XANAX, VALIUM & ALL MEDICATIONS servants

day

To: ------[at]gmail.com

There is no data there to allow for any parsing to occur ....

Where are the Received: lines for example?

Other problems may deal with the way you've submitted your spam, but you didn't say anuthing about that ...

software involved

method of 'forwarding'

Posted

Hello.

What "headers" did you mean ?

I change my mail to "------" and my submition adress to "submit.------[at]spam.spamcop.net" in my message.

What I can do to create correct report ?

Posted

You posted an error e-mail from the SpamCop.net Parsing & Reporting system. This e-mail contained the e-mail that you sent in .. it is the headers of that e-mail that I am referring to .. those header lines are incomplete ... there are no Received: lines in the e-mail you sent to SpamCop.net.

What to do? Help us out by telling us the rest of the story .. as I suggested .. what software are you using, how are you sending the e-mail to SpamCop.net, etc.

Posted
What "headers" did you mean ?

I change my mail to "------" and my submition adress to "submit.------[at]spam.spamcop.net" in my message.

What I can do to create correct report ?

What is your native language? If you are having trouble understanding due to language barrier you can try and use the Babelfish service to translate this page into your native language. It might also help to look up the terms in the language specific pages on The Wikipedia.

As for your original question, you don't need to change your email to '------' because SpamCop will automatically remove your email address from any mails submitted through the system if you configure it to report the spam 'anonymously', so the spammers will not know who submitted the email.

Hope that helps.

Posted

Posting IP address traces back to a Germany / Deutschland location ... I was last there in the early 70's ... way out of practice .. though of course, "ein Bier bitte" is a never-to-be-forgotten phrase <g>

Posted

I can't report any spam messages.

The reason you get an error message is because the full headers were not present in the spam you submitted. SpamCop needs to see the entire path the message took on its way to you so it can track the spam back to the source.

Maybe these FAQs will help:

http://www.spamcop.net/fom-serve/cache/19.html

http://www.spamcop.net/fom-serve/cache/17.html

If your mail client supports it, forwarding the spam as an email attachment to your 'submit' address is the best way.

SpamCop is looking for the full headers in one contiguous block of text, followed by a blank line, which signals the end of the headers, and then followed by the body text of the spam. The parse won't accept headers if there is no body text with them.

- Don D'Minion - SpamCop Admin -

Posted

Wazoo & SpamCopAdmin

I forward spam-messages to SpamCop via Gmail web interface.

Gmail not present here because it does not support headers forwarding ?

jongrose

I understand most of English and don't need to translate :) But I don't know properly grammatic. My native language is Russian (but spam in Gmail in English)

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...