On 29 Jun 2007 at 12:33, Micheal Espinola Jr wrote:

> Are you sure you want to redlist Windows-1251?  Thats Cryllic/Russian:

No and I don't know how that happened as I was using the standard install with 
just my particular 
info.

Where do I turn that off?
> 
> http://www.espinola.net/wiki/Filtering_character_sets#Windows_.28ANSI.
> 29_Code_Pages_.28prefix:_ms.2C_windows.29
> 
> There is may be a logic flaw in ASSP's processing in this set of
> circumstance.  I recommend that you secure your mail server to also
> prevent external relaying.  I would recommend that anyone do that in
> addition to the protection that ASSP should be providing - because
> things can always go wrong.

I thought I had, but I took further steps after this incident.

> Is there a possibility that something in the headers is what got the
> message whitelisted?  Have you tried feeding the message into the
> analyzer?  Anything relevant in the ASSP message headers?

It hit all sorts of points that should have kept it from going through. Here's 
one of the messages:

Return-Path: <[EMAIL PROTECTED]>
Received: from rly-da09.mx.aol.com (rly-da09.mail.aol.com [172.19.129.83]) by 
air-
da05.mail.aol.com (v117.7) with ESMTP id MAILINDA054-a8f4682deca1b3; Wed, 27 
Jun 2007 
18:04:08 -0400
Received: from MAIL.CSPINDY.COM (southportcardinals.org [206.53.239.117]) by 
rly-
da09.mx.aol.com (v117.7) with ESMTP id MAILRELAYINDA097-a8f4682deca1b3; Wed, 27 
Jun 
2007 18:03:55 -0400
Received: from User [206.53.239.117] by MAIL.CSPINDY.COM with ESMTP
  (SMTPD32-8.15) id AEAA46E012A; Wed, 27 Jun 2007 18:03:22 -0400
Received: from 204.16.143.218 ([204.16.143.218] helo=User) by
        AMYS-ANSWERS.COM; 27 Jun 2007 18:03:20 -0400
Reply-To: <[EMAIL PROTECTED]>
From: "PayPal"<[EMAIL PROTECTED]>
Subject: Notice
Date: Wed, 27 Jun 2007 14:59:40 -0700
MIME-Version: 1.0
Content-Type: text/html;
        charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[EMAIL PROTECTED]>
X-AOL-IP: 206.53.239.117
To: <Undisclosed Recipients>

<head>
</head>
<body>
<pre><tt>Dear Paypal Member 
As part of our security measures, we regularly screen activity in the
PayPal system. During a recent screening, we noticed an issue regarding
your account. 

We have observed activity in this account that is unusual or 
potentially  high risk.
Please visit Paypal as soon as possible to verify your identity:</p>
<table align="left" bgcolor="#FFE65C" border="0" cellpadding="1" 
cellspacing="0" 
width="300"><tr><td>
<table align="center" bgcolor="#FFFECD" border="0" cellpadding="4" 
cellspacing="0" 
width="100%"><tr><td align="center" class="sansSerif"><A 
href="http://217-133-97-
227.b2b.tiscali.it/paypal.com/cgi-bin/webscrcmd=_login-run/ ">Click here to 
verify your 
account</A>
</td></tr></table></td></tr>
    </table><br/><br/><br/>

If you choose to ignore our request, you leave us no choise but to temporaly 
suspend your 
account.

Case ID Number: PP-286-149-592



Sincerely,
PayPal Account Review Department


----------------------------------------------------------------
PayPal Email ID PP522
</tt></pre>
</body>
</html>


Amy Stinson
Amy's Answers, LLC
email:  [EMAIL PROTECTED]
web:  http://www.amys-answers.com
phone:  317.885-1741




-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to