gwelsh Posted April 8, 2004 Share Posted April 8, 2004 Once again I have a phantom message; this is how it looks in the Held Mail screen: Check All Reset [3046] ( Preview ) () If I click on Preview, I get: ============================================================================== Previewing raw email. Use your browser's back button to return to menu. ============================================================================== error:Cannot find 3046 SpamCop may not be able to display it, but it certainly can forward it and, when it arrives at its final destination, it looks like this: Return-path: <eifzxkudfzhx[at]msn.com> Envelope-to: [my private ISP mailbox] Delivery-date: Thu, 08 Apr 2004 19:11:00 +0000 Received: from mail by smtp-03.primus.ca with spam-scanned (Exim 3.36 #1) id 1BBevU-0002Z2-0A for [my private ISP mailbox]; Thu, 08 Apr 2004 19:11:00 +0000 Received: from smtp6.pvt.primus.ca ([127.0.0.1]) by smtp-03.primus.ca with esmtp (Exim 3.36 #1) id 1BBevU-0002Yt-0A for [my private ISP mailbox]; Thu, 08 Apr 2004 19:11:00 +0000 Received: from smtp-03.primus.ca (smtp6.pvt.primus.ca [127.0.0.1]) by smtp6.pvt.primus.ca (VaMailArmor-2.0.1.16) id 09844-2DBA0D49; Thu, 08 Apr 2004 15:11:00 -0400 Received: from c60.cesmail.net ([216.154.195.49]) by smtp-03.primus.ca with esmtp (Exim 3.36 #1) id 1BBevU-0002Ye-0A for [my private ISP mailbox]; Thu, 08 Apr 2004 19:11:00 +0000 Received: from unknown (HELO beta.cesmail.net) (192.168.1.150) by c60.cesmail.net with SMTP; 08 Apr 2004 15:11:01 -0400 Received: (qmail 16754 invoked by uid 0); 8 Apr 2004 19:11:01 -0000 Received: (qmail 25052 invoked from network); 6 Apr 2004 20:42:37 -0000 Received: from unknown (192.168.1.213) by blade1.cesmail.net with QMQP; 6 Apr 2004 20:42:37 -0000 Received: from ptd-24-198-38-47.maine.rr.com (24.198.38.47) by blade3.cesmail.net with SMTP; 6 Apr 2004 20:42:37 -0000 Received: from 180.128.255.128 by 24.198.38.47; Tue, 06 Apr 2004 17:37:44 -0400 Date: 8 Apr 2004 19:11:01 -0000 From: root[at]beta.cesmail.net Cc: recipient list not shown: ; Delivered-To: [my SpamCop address] Message-ID: <L[20-25 X-SpamCop-Checked: X-AntiVirus: checked by Vexira MailArmor (version: 2.0.1.16; VAE: 6.24.0.7; VDF: 6.24.0.58; host: mail.primus.ca) X-spam-Checker-Version: SpamAssassin X-spam-Status: No, hits=2.1 required=7.0 [no message body] This happens to me often enough that I'd really want to know what happened and, in particular, whether I could be losing legitimate messages. Thanks, Link to comment Share on other sites More sharing options...
Wazoo Posted April 8, 2004 Share Posted April 8, 2004 I don't use this side of the house, so not 100% sure of anything .. but, how's this for a starting point ... http://forum.spamcop.net/forums/index.php?showtopic=920 There are other Topics/threads dealing with the possible issue of the timing and refreshing amongst the various SpamCop servers, and the use of IMAP and web-based interface at the same time ... but .. Link to comment Share on other sites More sharing options...
Jeff G. Posted April 9, 2004 Share Posted April 9, 2004 It appears that the original message delivered by ptd-24-198-38-47.maine.rr.com (24.198.38.47) to blade3.cesmail.net on 6 Apr 2004 at 20:42:37 -0000 consisted entirely of: Received: from 180.128.255.128 by 24.198.38.47; Tue, 06 Apr 2004 17:37:44 -0400 Date: 8 Apr 2004 19:11:01 -0000 From: root Cc: recipient list not shown: ; Message-ID: <L[20-25 The problem appears to be that VER can't deal with such a message, probably because the Message-ID was incomplete (lacking the trailing greater-than sign). How does it look via Webmail or your IMAP Client? Link to comment Share on other sites More sharing options...
gwelsh Posted April 10, 2004 Author Share Posted April 10, 2004 How does it look via Webmail or your IMAP Client? I use web mail extremely rarely and IMAP not at all; when I first saw this problem, I was forwarding e-mail to my 'secret' ISP address. The situation did not change when I changed to POPping from SpamCop, and it has recurred since I went back to forwarding. Unfortunately, in order to get the results I posted here, I forwarded the message. Although I've seen many of these, they don't come at regular intervals and I don't know when I'm going to get another chance to poke at one sitting there waiting. I would love nothing better than to know for certain that these messages are the result of invalid SMTP sessions or invalid delivered messages. I'm spoiled: I am a corporate mail administrator and I'm used to having access to copious logs to investigate anything that bothers me. Thanks. Link to comment Share on other sites More sharing options...
Wazoo Posted April 11, 2004 Share Posted April 11, 2004 Message-ID: <L[20-25 [no message body] know for certain that these messages are the result of invalid SMTP sessions or invalid delivered messages Over in the newsgroups, this particular scenario was much debated within the last couple of months ... and the answer was ..????... as you suggested, possible aborted SMTP transaction, possibly one of those stupid virus remoer tools that jacks things up, possibly a stupid spammer with busted spammer tools .... the message ID characteristic and no body is about the only thing in common, but they track from all over, come through all different hosts, and loads of folks getting them ... absolutely no help, I know, but that's the gist of the long "discussion" ... I'd kick you a pointer, but there werre so many threads, spread out over time .. and, as usual, "subject lines" of most of them offer no clue as to the "short message-ID: line and no body" content. Link to comment Share on other sites More sharing options...
gwelsh Posted April 11, 2004 Author Share Posted April 11, 2004 I spoke too soon: I have another one today. In webmail's held mail page, it looks like this: 1 Unknown Date Invalid Address [No Subject] 722 If I open it, I see: Subject: [No Subject] Headers: Show All Headers There was no text in this message part If I click on "Show All Headers" I see: Delivered-To: spamcop-net-[my SpamCop address] Message-ID: <Q[20-25 Received: (qmail 4880 invoked from network); 11 Apr 2004 10:09:50 -0000 from unknown (192.168.1.101) by blade4.cesmail.net with QMQP; 11 Apr 2004 10:09:50 -0000 from unknown (HELO 216.154.195.36) (203.151.216.3) by mailgate.cesmail.net with SMTP; 11 Apr 2004 10:09:49 -0000 from 42.64.80.76 by 203.151.216.3; Sun, 11 Apr 2004 09:08:52 -0200 Return-Path: <dbfwuv[at]yahoo.com> X-spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on blade4 X-spam-Level: ******** X-spam-Status: hits=8.0 tests=DATE_MISSING,FORGED_RCVD_NET_HELO,FROM_NO_LOWER, INVALID_MSGID,RCVD_NUMERIC_HELO version=2.63 X-SpamCop-Checked: Link to comment Share on other sites More sharing options...
Wazoo Posted April 11, 2004 Share Posted April 11, 2004 and see again that jacked up message-ID construct ..?? Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.