We route WEIGHT20 mail to a special mailbox. After checking this mailbox I noticed something that I wasn't aware of. Some messages when viewed in Imail web messaging was regular spam BUT when I viewed the same message using the Imail client that is installed on the server with Imail it was a regular message albeit faked. Most likely to fool messages sniffers. Look at this.
Here is the full header from the message in Imail web messaging. Check the subject line. It's a spam about financing (the prefix POSSIBLE SPAM is what we add on at WEIGHT10): Received: from MX4.NetWood.net [209.247.184.2] by netwood.net with ESMTP (SMTPD32-7.15) id AEB6273900AA; Thu, 09 Oct 2003 13:01:58 -0700 Received: from mx168.rewardd3.us (unknown [204.29.185.168]) by MX4.NetWood.net (Postfix) with ESMTP id 27CF33EE429 for <[EMAIL PROTECTED]>; Thu, 9 Oct 2003 13:00:47 -0700 (PDT) (envelope-from [EMAIL PROTECTED]) Message-ID: <[EMAIL PROTECTED]> From: "Joy Raquel" <[EMAIL PROTECTED]> To: "Kristine Alexandria Gisladottir" <[EMAIL PROTECTED]> Subject: POSSIBLE SPAM:Kristine, Venice locale-4.50% - Don't Wait Date: Thu, 9 Oct 2003 20:00:55 -0700 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_2BF831_01C38E75.C126D010" Thread-Index: AcOOn0EeLDQzJkTVRCqLk7KsbjkTEg== Content-Class: urn:content-classes:message X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-RBL-Warning: SPAMCOP: Blocked - see http://www.spamcop.net/bl.shtml?204.29.185.168 X-RBL-Warning: EASYNET-DNSBL: Blacklisted by easynet.nl DNSBL - http://blackholes.easynet.nl/errors.html X-RBL-Warning: SBL: http://www.spamhaus.org/SBL/sbl.lasso?query=SBL9062 X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 204.29.185.168 with no reverse DNS entry. X-Declude-Sender: [EMAIL PROTECTED] [204.29.185.168] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: SPAMCOP, EASYNET-DNSBL, SBL, IPNOTINMX, NOLEGITCONTENT, REVDNS, WEIGHT10, WEIGHT20 [25] X-RCPT-TO: <[EMAIL PROTECTED]> Status: R X-UIDL: 365644892 Here is the content of the message in Imail client. This is the only text, nothing of the spam is there. Another black hole was discovered in a galaxy less than 21 million light years from Earth. This black hole has a mass of more than 40 million suns. In Galaxy NGC 6240, almost 300 million light years from Earth, astronomers believe to have found a black hole during observations of two colliding galaxies. The black hole is caught between the two galaxies and is expected to merge with them in the next few hundred million years. It has a mass 10 to 100 times larger than any black hole ever found. It has the mass of the Milky Way in 1/10,000th the area. I assume that they must do this to try to avoid content filtering. I was never aware of that they could fake messages like this. Jonas Fornander - System Administrator Netwood Communications,LLC - www.netwood.net Find out why we're better - 310-442-1530 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
