On Oct 1, 2010, at 1:27 PM, Thomas Eckardt wrote: > IMHO is this not a correct MIME message: > >> From: Trustwave <[email protected]< > mailto:[email protected]>> >> To: IT_AV <[email protected]<mailto:[email protected]>> > > both lines are not correct > >> Message-ID: <[email protected]< > mailto:[email protected]>> > > and this also > > I would block this mail because of this.
Thanks for your reply Thomas. I didn't notice, but my original email to the list got all messed up and had "mailto" and "http" links added to it, and was therefore misleading. Let me try to transmit the email headers and asspnotspam report again below. My concerns: [email protected] -- Assp would whitelist this address, because it is in the From header. [email protected] -- This is not only a local address, but it wasn't in the original email at all. [email protected] was the address from which I forwarded the mail to asspnotspam. That's two reasons it should not have been added to the whitelist. [email protected] -- This comes from the Message-ID header. Why should this be added to the whitelist? 47460077c7d11-879590_html-862063647-7507...@communications.trustwave.com [email protected] -- These are both partial addresses from the Reply-To header. I can see why a Reply-To address makes sense for the whitelist, maybe, although I find that somewhat questionable as Reply-To isn't considered when whitelisting incoming email, is it? In any case, these addresses are mangled. Here is the original info. Hopefully it doesn't get messed up in transit... Response from asspnotspam: [email protected]: added to whitelist [email protected],[email protected]: added to whitelist [email protected]: added to whitelist [email protected],[email protected]: added to whitelist [email protected]: added to whitelist [email protected],[email protected]: added to whitelist 47460077c7d11-879590_html-862063647-7507...@communications.trustwave.com: added to whitelist 47460077c7d11-879590_html-862063647-7507...@communications.trustwave.com,[email protected]: added to whitelist Headers of email: Received: from mta.communications.trustwave.com (10.10.16.12) by mail.thecjm.org (10.10.11.5) with Microsoft SMTP Server id 8.2.176.0; Tue, 31 Aug 2010 17:47:56 -0700 Received: from mta.communications.trustwave.com ([66.231.89.232] helo=mta.communications.trustwave.com) by cjm-assp2.thecjm.lan with ESMTP (2.0.1); 31 Aug 2010 17:52:31 -0700 Received: by mta.communications.trustwave.com (PowerMTA(TM) v3.5r15) id hfm7340ie1s9 for <[email protected]>; Tue, 31 Aug 2010 17:20:09 -0600 (envelope-from <bounce-879590_html-862063647-14143185-7507...@bounce.communications.trustwave.com>) From: Trustwave <[email protected]> To: IT_AV <[email protected]> Content-Class: urn:content-classes:message Date: Tue, 31 Aug 2010 17:48:33 -0700 Subject: [FILTERED] Welcome to the TrustKeeper PCI DSS Compliance Program Thread-Topic: [FILTERED] Welcome to the TrustKeeper PCI DSS Compliance Program Thread-Index: ActJb1JL8etJMiuKR3yN/ydOPzhWdg== Message-ID: <[email protected]> List-Unsubscribe: <mailto:leave-fca51c777c610d7d1a4c342838-fe251c767764027e731077-fe6415747460077c7d11-fef91375756307-ffc...@leave.communications.trustwave.com> Reply-To: Trustwave <reply-fe6415747460077c7d11-879590_html-862063647-7507...@communications.trustwave.com> Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-Exchange-Organization-AuthSource: cjm-exch1.TheCJM.lan X-MS-Has-Attach: X-Auto-Response-Suppress: DR, OOF, AutoReply X-MS-Exchange-Organization-SCL: 9 X-MS-TNEF-Correlator: x-assp-delay: not delayed (gripvalue low: 0.12); 31 Aug 2010 17:52:31 -0700 x-assp-spam: YES x-assp-spam-reason: MessageScore passed low limit dkim-signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=200608; d=communications.trustwave.com; h=From:To:Subject:Date:List-Unsubscribe:MIME-Version:Reply-To:Message-ID:Content-Type:Content-Transfer-Encoding; [email protected]; bh=B6gxA/9SZFGUgHR1Lai21kKsmjo=; b=wA+6A7SuzemZNTiiHQzCwY981V4rljahKmesPaLshlSrjrZ/8ZaZu6GxGFKg4qM+k2MCEAMnuudZ jsaGddQnMuf4cWRAnQZ3qKNEkIRmMtJqWksOOtQDtw168VfsoRMsGLLKcAFbmUixCgKlXr9+0IEM PyKhUeM4kxRDUvqmLKU= x-spam-status: yes x-job: 75073_14143185 x-assp-envelope-from: bounce-879590_html-862063647-14143185-7507...@bounce.communications.trustwave.com Content-Type: multipart/alternative; boundary="_000_380dc3a458c94e10bdb1965395b820fbxtinmta12xtlocal_" MIME-Version: 1.0 ------------------------------------------------------------------------------ Start uncovering the many advantages of virtual appliances and start using them to simplify application deployment and accelerate your shift to cloud computing. http://p.sf.net/sfu/novell-sfdev2dev _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
