Help - Search - Members - Calendar
Full Version: Two More Parsing Problems
hsc message board > Main > hsc Software Support
dtabbutt
1.3.1 would not parse the spammer's address in either of these.

This really needs to be fixed. I am on a crusade against these cretins, and I need good tools.

Thanks,

Don

QUOTE
Return-Path: <gatewhk@attbi.com>
Received: from smtpc.abac.com (smtpc.abac.com [216.55.170.4])
by pro2.abac.com (8.12.10/8.12.10) with ESMTP id i7557K1J085763
for <>; Wed, 4 Aug 2004 22:07:21 -0700 (PDT)
(envelope-from gatewhk@attbi.com)
Message-Id: <200408050507.i7557K1J085763@pro2.abac.com>
Received: from [221.199.173.66] (helo=attbi.com)
by smtpc.abac.com with smtp id 1BsaTF-000MXV-Cc
for; Wed, 04 Aug 2004 22:07:19 -0700
From: "Jennifer" <gatewty@attbi.com>
To: <>
Date: Thu, 5 Aug 2004 00:08:03 -0500
Mime-Version: 1.0
Content-Type: text/html; charset=us-ascii
X-Aplus-MailScanner-Information: Please contact the ISP for more information
X-Aplus-MailScanner: Found to be clean
X-Aplus-MailScanner-SpamCheck: spam, SpamAssassin (score=6.646, required 1,
BAYES_99 5.40, CLICK_BELOW 0.10, HTML_60_70 0.11, HTML_FONT_BIG 0.27,
HTML_LINK_CLICK_HERE 0.10, HTML_MESSAGE 0.10, LIMITED_TIME_ONLY 0.25,
MIME_HTML_ONLY 0.32)
X-MailScanner-SpamScore: !!!!!!
Subject:
X-Spam-Score: 3.049 (CLICK_BELOW,HTML_60_70,HTML_FONT_BIG,HTML_LINK_CLICK_HERE,HTML_MESSAGE,LIMITED_
TIME_ONLY,MIME_HTML_ONLY,MSGID_FROM_MTA_HEADER)
X-Spam-Level: !!!
X-Scanned-By: MIMEDefang 2.43


<html>
<body>
<center>
<font face="verdana" size="+3">A permanent solution to Pe<a href></a>nis Enla<a href></a>rgement</font>
<br><br>
<font size="+2" face="arial"><b><font color="#ffff00">LIMITED TIME OFFER: </font></b>
Add atleast 4 inches or get your money back!</font>
<br><br>
<p><font face="verdana" size="+2"><b>----></b> <a href="http://www.ezherbalbuy.com/cgi-bin/c.cgi?id=giggles">Click Here To Learn More</a>
<b><----</b></font>
<p>
<br><br>
<font size="-2"><a href="http://www.ezherbalbuy.com/rms.html">No more offers</a></font>
</body></html>



QUOTE
Return-Path: <gatewhr@rogers.com>
Received: from smtpa.abac.com (smtpa.abac.com [216.55.170.2])
by pro2.abac.com (8.12.10/8.12.10) with ESMTP id i7557A1J085671
for <>; Wed, 4 Aug 2004 22:07:11 -0700 (PDT)
(envelope-from gatewhr@rogers.com)
Message-Id: <200408050507.i7557A1J085671@pro2.abac.com>
Received: from [211.209.2.29] (helo=rogers.com)
by smtpa.abac.com with smtp id 1BsaT7-0007gX-6v
for ; Wed, 04 Aug 2004 22:07:09 -0700
From: "Julie" <gatewln@rogers.com>
To: <>
Date: Thu, 5 Aug 2004 00:07:55 -0500
Mime-Version: 1.0
Content-Type: text/html; charset=us-ascii
X-Aplus-MailScanner-Information: Please contact the ISP for more information
X-Aplus-MailScanner: Found to be clean
X-Aplus-MailScanner-SpamCheck: spam, SpamAssassin (score=7.803, required 1,
BANG_MORE 1.16, BAYES_99 5.40, CLICK_BELOW 0.10, HTML_60_70 0.11,
HTML_FONT_BIG 0.27, HTML_LINK_CLICK_HERE 0.10, HTML_MESSAGE 0.10,
LIMITED_TIME_ONLY 0.25, MIME_HTML_ONLY 0.32)
X-MailScanner-SpamScore: !!!!!!!
Subject:
X-Spam-Score: 3.462 (BANG_MORE,CLICK_BELOW,HTML_60_70,HTML_FONT_BIG,HTML_LINK_CLICK_HERE,HTML_MESSAG
E,LIMITED_TIME_ONLY,MIME_HTML_ONLY,MSGID_FROM_MTA_HEADER)
X-Spam-Level: !!!
X-Scanned-By: MIMEDefang 2.43


<html>
<body>
<center>
<font face="verdana" size="+3">A permanent fix to Pe<a href></a>nis Gro<a href></a>wth</font>
<br><br>
<font size="+2" face="arial"><b><font color="#ffff00">LIMITED TIME OFFER: </font></b>
Increase atleast 4 inches or your money back</font>
<br><br>
<p><font face="verdana" size="+2"><b>---></b> <a href="http://www.ezherbalbuy.com/cgi-bin/c.cgi?id=giggles">Click Here And Learn More!</a>
<b><---</b></font>
<p>
<br><br>
<font size="-2"><a href="http://www.ezherbalbuy.com/rms.html">No thanks</a></font>
</body></html>
Jeff Hendrickson
Hi Don,

This is another SMTP implementation issue where [221.199.173.66] (helo=attbi.com) shows up in the header, where SpamX is expecting (helo=attbi.com[221.199.173.66] ).

I can cobble something together to address this. I'll post a message here when it's done.

Regs,
-Jeff ph34r.gif
Jeff Hendrickson
Hi Don,

I've put a fix for this on the Web site, please refer to the Version 1.3.2 Released message on this board for details.

Please let me know if this corrects the problem you were good enough to take the time to report.

Regs,

-Jeff
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.