lark_1323 Posted April 1, 2004 Share Posted April 1, 2004 I have been getting several spam emails recently where the headers have been manipulated. They do not appear as they should, and as a result they are being stopped with this message. Parsing header: Header incomplete, aborting. No source IP address found, cannot proceed. Add/edit your mailhost configuration Finding full email headers Submitting spam via email (may work better) Example: What spam headers should look like Nothing to do. This is how they look X-Apparently-To: (myemail address removed) via 216.136.129.235; Thu, 01 Apr 2004 04:33:54 -0800 X-YahooFilteredBulk: 24.151.249.121 Return-Path: <pelaithol[at]clickforadate.com> Received: from 24.151.249.121 (HELO 24-151-249-121.chartertn.net) (24.151.249.121) by mta104.mail.sc5.yahoo.com with SMTP; Thu, 01 Apr 2004 04:33:52 -0800 X-Message-Info: 7wQ1aP5bB#e8Wc5Qwtj2gO2rNj0I Received: from hdhzhpb.com (71.151.220.236) (8.11.6/8.11.6) by (za.mx.aol.com) %DELIVERER %DELIVERY_TYPE 807cC3hF8mMk8383uowROS 1694 for <my email address removed>Thu, 01 Apr 2004 08:40:21 +0400 Received: from mqmjdzYG.com (localhost [127.0.0.1]) (31.160.76.114) by (smtp.cs.com ) %DELIVERER %DELIVERY_TYPE hnk94trcecy5tW5cG3iA2bO q0Iq1D for <myemailaddressremoved>; Wed, 31 Mar 2004 23:40:21 -0500 Message-ID: <zyfqhbuvhipdrpcfotrnmk5Ms9F[at]yahoo.com> Reply-to: "Brianna Whitehead" <pelaithol[at]clickforadate.com> From: "Brianna Whitehead" <pelaithol[at]clickforadate.com> Add to Address Book To: ********(my email address removed) Subject: (email address removed) its the 21st century...playmates are in!!!.!!!creche Date: Thu, 01 Apr 2004 09:33:21 +0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--4031149436824626557" Content-Length: 624 Is there any way I can "fix" the headers so the spam will be accepted by Spamcop? Thank you. Link to comment Share on other sites More sharing options...
Wazoo Posted April 1, 2004 Share Posted April 1, 2004 Did you follow the link to "what headers should look like" ..?? Looking at what you've posted, there are several spots that look like probable issues. Fo instance, the Message-ID: line ... the length on screen looks like it should have fit the display page just fine, so the impression is that somehow there's some word-wrapping that got involved, such that to the parser, there is no Message-ID: ... and on the next header line, there's a string of nonsense. The rest of the long line items have the same issue on the display, but have to note that this applicatin likes to vaporize white space ... so that's why I picked on the Message-ID: line, being short enough that it should have displayed on a single line. Link to comment Share on other sites More sharing options...
Farelf Posted April 2, 2004 Share Posted April 2, 2004 Yep, exactly as Wazoo says - you need to look at Problems with spam not in original format. When the wrapping is fixed, the parser is more or less happy with the example you give (one warning which may or may not be significant - any thoughts anyone?) see Test report (dummy body added to satisfy boundary declaration) Link to comment Share on other sites More sharing options...
Wazoo Posted April 2, 2004 Share Posted April 2, 2004 %DELIVERER %DELIVERY_TYPE see that twice, I just went with idiot spammer using new piece of crap spammer software. Link to comment Share on other sites More sharing options...
Jeff G. Posted April 2, 2004 Share Posted April 2, 2004 Is there any way I can "fix" the headers so the spam will be accepted by Spamcop?All of the "Received" header lines and the "X-Message-Info" and "Message-ID" lines are badly wrapped. Yahoo! generally doesn't have such wrapping problems, so you need to find out what is doing that, and stop it from doing that. Please see http://www.spamcop.net/fom-serve/cache/368.html for more info on resolving this problem. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.