I did actually set up the BADHEADERS filter last night and I just caught a false positive (though a BADHEADER positive). I don't have the error being written to the E-mail headers, but I looked it up on Scott's tool's page from the code in the log file and got back "This E-mail has a made-up header that does not follow the standard RFC format for an E-mail header." Any ideas??? Could it have barfed on the ~50 addresses in the To line???
This is valid content and seems to have been sent through HotMail??? It doesn't look strange to me (but what do I know).
I'm guessing the bogus header was what seemed to be part of the To: headers. For example:
To: [EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED]contains a bogus header ("[EMAIL PROTECTED]," is treated as a header separate from the "To:" header).
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you have been missing: Ask for a free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
