ASSP 1.8.5.2(0.0.02) (and a few prior versions) -- The header is
bleeding over into the body of the email again. Granted, the email is
spam, but I've seen it happen several times now. Here is an example
header and body.
Header:
Microsoft Mail Internet Headers Version 2.0
Received: from mydomain.com ([192.168.3.10]) by mailserver.mydomain.com
with Microsoft SMTPSVC(5.0.2195.6713);
Fri, 14 Jan 2011 11:53:30 -0500
Received: from ASSP [192.168.3.10] by mail.mydomain.com - SurfControl
E-mail Filter (5.5.0); Fri, 14 Jan 2011 11:53:30 -0500
Received: from mail.picsthis.com ([98.158.238.93]
helo=mail.picsthis.com)
with IPv4:26 by ASSP.nospam; 14 Jan 2011 11:53:23 -0500
Received: by mail.picsthis.com (PowerMTA(TM) v3.0c2) id h61voa01g749;
Fri, 14 Jan 2011 11:46:18 -0500 (envelope-from <[email protected]>)
Date: Fri, 14 Jan 2011 11:46:05 -0500
From: "wheel chair vans" <[email protected]>
Subject: Go anywhere with a wheelchair van
To: [email protected]
Message-ID: <[email protected]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
X-Assp-Delay: [email protected] not delayed (noDelayHelosRe contains:
mail); 14 Jan 2011 11:53:23 -0500
X-Assp-Score: 19 (DNSBL: neutral, 98.158.238.93 listed in
blackholes.five-ten-sg.com
dnsbl-2.uceprotect.net)
X-Assp-DNSBL: neutral, 98.158.238.93 listed in
(blackholes.five-ten-sg.com<-127.0.0.9;
dnsbl-2.uceprotect.net<-127.0.0.2; )
X-Assp-Score: 50 (URIBL failed: 'picsthis.com' listed in
'black.uribl.com')
Return-Path: [email protected]
X-OriginalArrivalTime: 14 Jan 2011 16:53:30.0972 (UTC)
FILETIME=[92BD71C0:01CBB40B]
X-EsetId: 36C0EE2052F6B8116186
Body:
X-Assp-URIBL failed: 'picsthis.com' listed in 'black.uribl.com'
X-Assp-Score: 40 (Bayesian Probability: 1.0000)
X-Assp-Score: 10 (Bad IP Profile for 98.158.238.93)
X-Assp-Spam-Level: ***********************
X-Assp-Envelope-From: [email protected]
X-Assp-Version: 1.8.5.2(0.0.01) on ASSP.nospam
X-Assp-ID: ASSP.nospam id-12950-00986
X-Assp-Spam: YES
X-Assp-Original-Subject: Go anywhere with a wheelchair van
X-Assp-Spam-Reason: Score (119) over MessageScoringUpperLimit (49)
X-Assp-Message-Totalscore: 119
X-Assp-Intended-For: [email protected]
X-Assp-Copy-Spam: Yes
X-SEF-Processed: 5_5_0_210__2011_01_14_11_53_30
Then the rest of the body follows.
Kind Regards,
Brett
------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand
malware threats, the impact they can have on your business, and how you
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
