Jump to content

Headers Manipulated


lark_1323

Recommended Posts

Posted

I have been getting several spam emails recently where the headers have been manipulated. They do not appear as they should, and as a result they are being stopped with this message.

Parsing header:

Header incomplete, aborting.

No source IP address found, cannot proceed.

Add/edit your mailhost configuration

Finding full email headers

Submitting spam via email (may work better)

Example: What spam headers should look like

Nothing to do.

This is how they look

X-Apparently-To: (myemail address removed) via 216.136.129.235; Thu, 01 Apr 2004 04:33:54 -0800

X-YahooFilteredBulk: 24.151.249.121

Return-Path: <pelaithol[at]clickforadate.com>

Received: from 24.151.249.121 (HELO 24-151-249-121.chartertn.net) (24.151.249.121) by mta104.mail.sc5.yahoo.com with SMTP; Thu, 01 Apr 2004 04:33:52 -0800

X-Message-Info:

7wQ1aP5bB#e8Wc5Qwtj2gO2rNj0I

Received: from hdhzhpb.com (71.151.220.236)

(8.11.6/8.11.6) by (za.mx.aol.com) %DELIVERER %DELIVERY_TYPE

807cC3hF8mMk8383uowROS

1694 for <my email address removed>Thu, 01 Apr 2004 08:40:21 +0400

Received: from mqmjdzYG.com (localhost

[127.0.0.1]) (31.160.76.114) by (smtp.cs.com ) %DELIVERER %DELIVERY_TYPE

hnk94trcecy5tW5cG3iA2bO

q0Iq1D for <myemailaddressremoved>; Wed, 31 Mar 2004 23:40:21 -0500

Message-ID:

<zyfqhbuvhipdrpcfotrnmk5Ms9F[at]yahoo.com>

Reply-to: "Brianna Whitehead" <pelaithol[at]clickforadate.com>

From: "Brianna Whitehead" <pelaithol[at]clickforadate.com> Add to Address Book

To: ********(my email address removed)

Subject: (email address removed) its the 21st century...playmates are in!!!.!!!creche

Date: Thu, 01 Apr 2004 09:33:21 +0500

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="--4031149436824626557"

Content-Length: 624

Is there any way I can "fix" the headers so the spam will be accepted by Spamcop?

Thank you.

Posted

Did you follow the link to "what headers should look like" ..?? Looking at what you've posted, there are several spots that look like probable issues. Fo instance, the Message-ID: line ... the length on screen looks like it should have fit the display page just fine, so the impression is that somehow there's some word-wrapping that got involved, such that to the parser, there is no Message-ID: ... and

on the next header line, there's a string of nonsense. The rest of the long line items have the same issue on the display, but have to note that this applicatin likes to vaporize white space ... so that's why I picked on the Message-ID: line, being short enough that it should have displayed on a single line.

Posted
%DELIVERER %DELIVERY_TYPE

see that twice, I just went with idiot spammer using new piece of crap spammer software.

Posted
Is there any way I can "fix" the headers so the spam will be accepted by Spamcop?
All of the "Received" header lines and the "X-Message-Info" and "Message-ID" lines are badly wrapped. Yahoo! generally doesn't have such wrapping problems, so you need to find out what is doing that, and stop it from doing that. Please see http://www.spamcop.net/fom-serve/cache/368.html for more info on resolving this problem.

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...