Etana Posted May 14, 2008 Share Posted May 14, 2008 Lately while trying to process spam, I am unable to do it, because system replies: This email contains no date Message is old It happens with 95% of messages. Below is an example of a message I tried to report now (a copy of Spamcop page). X-AntiVirus: Checked by Dr.Web [version: 4.44, engine: 4.44.0.09170, virus records: 370805, updated: 14.05.2008] Received: from ppp92-100-39-20.pppoe.avangarddsl.ru ([92.100.39.20]:50978 "HELO avangarddsl.ru" smtp-auth: <none> TLS-CHIPER: <none> TLS-PEER-CN1: <none>) by mxfront3.yandex.ru with SMTP id 000000000000000 Tue, 13 May 2008 18:47:26 +0400 X-BornDate: 1139778000 X-Yandex-TimeMark: 1210690047 X-Yandex-spam: 4 X-Yandex-Front: mxfront3 X-spam-Flag: YES Received-SPF: none (mxfront3: 92.100.39.20 is neither permitted nor denied by domain of avangarddsl.ru; fakespf=softfail) client-ip=92.100.39.20; envelope-from=yzrmykgug[at]avangarddsl.ru; helo=avangarddsl.ru;, fakespf=softfail Message-ID: <0292______________________a8c0[at]avangarddsl.ru> Reply-To: =?koi8-r?B?89TVxMnRINrX1cvP2sHQydPJICA=?= <yzrmykgug[at]avangarddsl.ru> From: =?koi8-r?B?89TVxMnRINrX1cvP2sHQydPJICA=?= <yzrmykgug[at]avangarddsl.ru> To: x <x> Subject: [OBORONA-spam] =?koi8-r?B?+sHQydPYINDF08XOINcg98Hbxc0gydPQz8zOxc7JySDOwSDQwc3R1M7ZyiDEydPLIQ==?= Date: Tue, 13 May 2008 18:43:26 +0300 Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0016_01Y4XS8T.14W28W24" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-Oborona-spam-Flag: YES View entire message Parsing header: Received: from ppp92-100-39-20.pppoe.avangarddsl.ru ([92.100.39.20]:50978 "HELO avangarddsl.ru" smtp-auth: <none> TLS-CHIPER: <none> TLS-PEER-CN1: <none>) by mxfront3.yandex.ru with SMTP id 000000000000000 Tue, 13 May 2008 18:47:26 +0400 92.100.39.20 found host 92.100.39.20 (getting name) = ppp92-100-39-20.pppoe.avangarddsl.ru. ppp92-100-39-20.pppoe.avangarddsl.ru is 92.100.39.20 Possible spammer: 92.100.39.20 Received line accepted Tracking message source: 92.100.39.20: Routing details for 92.100.39.20 [refresh/show] Cached whois for 92.100.39.20 : noc[at]dtd.ptn.ru Using abuse net on noc[at]dtd.ptn.ru abuse net dtd.ptn.ru = abuse[at]rtcomm.ru, postmaster[at]dtd.ptn.ru, abuse[at]telegraph.spb.ru, abuse[at]dtd.ptn.ru, abuse[at]ptn.ru, noc[at]dtd.ptn.ru, abuse[at]spbnit.ru Using best contacts abuse[at]rtcomm.ru postmaster[at]dtd.ptn.ru abuse[at]telegraph.spb.ru abuse[at]dtd.ptn.ru abuse[at]ptn.ru noc[at]dtd.ptn.ru abuse[at]spbnit.ru Reports disabled for abuse[at]rtcomm.ru Using abuse#rtcomm.ru[at]devnull.spamcop.net for statistical tracking. This email contains no date Message is old Link to comment Share on other sites More sharing options...
Telarin Posted May 14, 2008 Share Posted May 14, 2008 Can you provide a tracking URL to one of these messages? Sometimes it helps to be able to see the headers as Spamcop does, rather than just a copy/paste of the originals. Most often these types of parser issues are caused by headers being mangled by one of the mailservers along the message's route. Link to comment Share on other sites More sharing options...
SpamCopAdmin Posted May 14, 2008 Share Posted May 14, 2008 Lately while trying to process spam, I am unable to do it, because system replies: This email contains no date by mxfront3.yandex.ru with SMTP id 000000000000000 There is a missing semi-colon preceding the timestamp/datestamp. SC never sees the datestamp. That "Received" line should have a semi-colon after ESMTP id 000000000000000 and look like this: Received: from ppp92-100-39-20.pppoe.avangarddsl.ru ([92.100.39.20]:50978 "HELO avangarddsl.ru" smtp-auth: <none> TLS-CHIPER: <none> TLS-PEER-CN1: <none>) by mxfront3.yandex.ru with SMTP id 000000000000000; Tue, 13 May 2008 18:47:26 +0400 See RFC2821 section 4.4 trace Information The time stamp line and the return path line are formally defined as follows: Time-stamp-line = "Received:" FWS Stamp <CRLF> Stamp = From-domain By-domain Opt-info ";" FWS date-time - Don D'Minion - SpamCop Admin - Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.