Jump to content

This email contains no date?


Etana

Recommended Posts

Lately while trying to process spam, I am unable to do it, because system replies:

This email contains no date

Message is old

It happens with 95% of messages. Below is an example of a message I tried to report now (a copy of Spamcop page).

X-AntiVirus: Checked by Dr.Web [version: 4.44, engine: 4.44.0.09170, virus records: 370805, updated: 14.05.2008]

Received: from ppp92-100-39-20.pppoe.avangarddsl.ru ([92.100.39.20]:50978 "HELO avangarddsl.ru"

smtp-auth: <none> TLS-CHIPER: <none> TLS-PEER-CN1: <none>)

by mxfront3.yandex.ru with SMTP id 000000000000000

Tue, 13 May 2008 18:47:26 +0400

X-BornDate: 1139778000

X-Yandex-TimeMark: 1210690047

X-Yandex-spam: 4

X-Yandex-Front: mxfront3

X-spam-Flag: YES

Received-SPF: none (mxfront3: 92.100.39.20 is neither permitted nor denied by domain of avangarddsl.ru; fakespf=softfail) client-ip=92.100.39.20; envelope-from=yzrmykgug[at]avangarddsl.ru; helo=avangarddsl.ru;, fakespf=softfail

Message-ID: <0292______________________a8c0[at]avangarddsl.ru>

Reply-To: =?koi8-r?B?89TVxMnRINrX1cvP2sHQydPJICA=?= <yzrmykgug[at]avangarddsl.ru>

From: =?koi8-r?B?89TVxMnRINrX1cvP2sHQydPJICA=?= <yzrmykgug[at]avangarddsl.ru>

To: x <x>

Subject: [OBORONA-spam] =?koi8-r?B?+sHQydPYINDF08XOINcg98Hbxc0gydPQz8zOxc7JySDOwSDQwc3R1M7ZyiDEydPLIQ==?=

Date: Tue, 13 May 2008 18:43:26 +0300

Mime-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0016_01Y4XS8T.14W28W24"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

X-Oborona-spam-Flag: YES

View entire message

Parsing header:

Received: from ppp92-100-39-20.pppoe.avangarddsl.ru ([92.100.39.20]:50978 "HELO avangarddsl.ru" smtp-auth: <none> TLS-CHIPER: <none> TLS-PEER-CN1: <none>) by mxfront3.yandex.ru with SMTP id 000000000000000 Tue, 13 May 2008 18:47:26 +0400

92.100.39.20 found

host 92.100.39.20 (getting name) = ppp92-100-39-20.pppoe.avangarddsl.ru.

ppp92-100-39-20.pppoe.avangarddsl.ru is 92.100.39.20

Possible spammer: 92.100.39.20

Received line accepted

Tracking message source: 92.100.39.20:

Routing details for 92.100.39.20

[refresh/show] Cached whois for 92.100.39.20 : noc[at]dtd.ptn.ru

Using abuse net on noc[at]dtd.ptn.ru

abuse net dtd.ptn.ru = abuse[at]rtcomm.ru, postmaster[at]dtd.ptn.ru, abuse[at]telegraph.spb.ru, abuse[at]dtd.ptn.ru, abuse[at]ptn.ru, noc[at]dtd.ptn.ru, abuse[at]spbnit.ru

Using best contacts abuse[at]rtcomm.ru postmaster[at]dtd.ptn.ru abuse[at]telegraph.spb.ru abuse[at]dtd.ptn.ru abuse[at]ptn.ru noc[at]dtd.ptn.ru abuse[at]spbnit.ru

Reports disabled for abuse[at]rtcomm.ru

Using abuse#rtcomm.ru[at]devnull.spamcop.net for statistical tracking.

This email contains no date

Message is old

Link to comment
Share on other sites

Can you provide a tracking URL to one of these messages? Sometimes it helps to be able to see the headers as Spamcop does, rather than just a copy/paste of the originals. Most often these types of parser issues are caused by headers being mangled by one of the mailservers along the message's route.

Link to comment
Share on other sites

Lately while trying to process spam, I am unable to do it, because system replies:

This email contains no date

by mxfront3.yandex.ru with SMTP id 000000000000000

There is a missing semi-colon preceding the timestamp/datestamp. SC never sees the datestamp.

That "Received" line should have a semi-colon after ESMTP id 000000000000000 and look like this:

Received: from ppp92-100-39-20.pppoe.avangarddsl.ru ([92.100.39.20]:50978 "HELO avangarddsl.ru"

smtp-auth: <none> TLS-CHIPER: <none> TLS-PEER-CN1: <none>)

by mxfront3.yandex.ru with SMTP id 000000000000000;

Tue, 13 May 2008 18:47:26 +0400

See RFC2821 section 4.4 trace Information

The time stamp line and the return path line are

formally defined as follows:

Time-stamp-line = "Received:" FWS Stamp <CRLF>

Stamp = From-domain By-domain Opt-info ";" FWS date-time

- Don D'Minion - SpamCop Admin -

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...