Il 16/02/2010 18.47, Stevan Bajić ha scritto:
> Feb 16 12:15:18 myserver dspam[14524]: Got error -5 in response to message
> data: 354 Start mail input; end with <CRLF>.<CRLF>#015
> Feb 16 12:15:18 myserver dspam[14524]: Signature retrieval for
> '15,4b7a7e45145241459220522#015' failed
> Feb 16 12:15:18 myserver dspam[14524]: Unable to find a valid signature.
> Aborting.
>
> The above tells me that the mail has a DSPAM signature. Could that be? Are
> you able to post the message in raw format to the list?
Yes. I attach postcat's output of the message.
Btw in the meanwhile i received another spam email like the one before,
and also this causes the same error. I attach also it.
Ettore
> postcat -q CE168B240D
*** ENVELOPE RECORDS deferred/C/CE168B240D ***
message_size: 3406 729 1 0
3406
message_arrival_time: Mon Feb 15 11:53:37 2010
create_time: Mon Feb 15 11:53:38 2010
named_attribute: rewrite_context=remote
sender: [email protected]
named_attribute: log_client_name=host81-149-214-42.in-addr.btopenworld.com
named_attribute: log_client_address=81.149.214.42
named_attribute: log_client_port=4646
named_attribute:
log_message_origin=host81-149-214-42.in-addr.btopenworld.com[81.149.214.42]
named_attribute: log_helo_name=pyedesign.co.uk
named_attribute: log_protocol_name=ESMTP
named_attribute: client_name=host81-149-214-42.in-addr.btopenworld.com
named_attribute: reverse_client_name=host81-149-214-42.in-addr.btopenworld.com
named_attribute: client_address=81.149.214.42
named_attribute: client_port=4646
named_attribute: helo_name=pyedesign.co.uk
named_attribute: client_address_type=2
named_attribute: dsn_orig_rcpt=rfc822;user[at]mydomain[dot]com
original_recipient: user[at]mydomain[dot]com
recipient: user[at]mydomain[dot]com
*** MESSAGE CONTENTS deferred/C/CE168B240D ***
X-policyd-weight: NOT_IN_SPAMCOP=-1.5 NOT_IN_BL_NJABL=-1.5
CL_IP_EQ_HELO_MX=-3.1 (check from: .popolarebari. - helo: .pyedesign. -
helo-domain: .pyedesign.) FROM/MX_MATCHES_NOT_HELO(DOMAIN)=1; rate: -5.1
Received-SPF: none (popolarebari.it: No applicable sender policy available)
receiver=myserver[dot]mydomain[dot]com; identity=mfrom;
envelope-from="[email protected]"; helo=pyedesign.co.uk;
client-ip=81.149.214.42
Received: from pyedesign.co.uk (host81-149-214-42.in-addr.btopenworld.com
[81.149.214.42])
by myserver[dot]mydomain[dot]com (Postfix) with ESMTP id CE168B240D
for <user[at]mydomain[dot]com>; Mon, 15 Feb 2010 11:53:37 +0100 (CET)
Received: from User ([82.106.21.138]) by pyedesign.co.uk with Microsoft
SMTPSVC(6.0.3790.3959);
Mon, 15 Feb 2010 10:18:13 +0000
From: "BANCA POPOLARE DI BARI"<[email protected]>
Subject: Verifica dei dati anagrafici
Date: Mon, 15 Feb 2010 11.18.12 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-OriginalArrivalTime: 15 Feb 2010 10:18:13.0324 (UTC)
FILETIME=[2E5CD0C0:01CAAE28]
To: undisclosed-recipients:;
<html><head>
<head>
</head>
<body dir="ltr">
<div align="left">
<p>
<table border="0" cellspacing="0" width="600">
<tbody><tr>
<td></td></tr>
<tr></tr>
<tr><td align="center" height="35"><div align="left">
<p><strong><a href="http://portal.dols.nl/webshop/bin/info.htm";><img
src="http://www.popolarebari.it/img/logo_bpbari.gif"; width="237" height="87"
border="0"></a></strong></p></center>
<p><strong>Nell'ambito di un progetto di verifica dei dati anagrafici
forniti durante la sottoscrizione dei servizi di BANCA POPOLARE DI BARI
e stata riscontrata una incongruenza relativa ai dati anagrafici in
oggetto da Lei forniti all momento della sottoscrizione
contrattuale.</strong></p>
<p><strong>L'inserimento dei dati alterati puo costituire motivo di
interruzione del servizio secondo gli art. 135 e 137/c da
Lei accettati al momento della sottoscrizione, oltre a costituire reato
penalmente perseguibile secondo il C.P.P art. 415 del 2001
relativo alla legge contro il riciclaggio e la transparenza dei dati forniti in
auto certificazione. Per ovviare al problema e necessaria
la verifica e l'aggiornamento dei dati relativi all'anaagrafica
dell'Intestatario dei servizi bancari. </strong></p>
<ul>
<strong align="left">Effetuare l'aggiornamento dei dati cliccando sul
seguente collegamento sicuro: </strong><br>
<br>
<a
href="http://www.jaipurclick.com/assets/MemberDirectoryManager/cas.html";
target="_blank"><strong><span id="main"><span id="search"><li>CLICCA QUI PER
ACCEDERE</span></span></strong></a>
</center>
<br>
</li>
</ul>
</div></td>
</tr>
</font>
<tr><td><p> </p>
<p> </p></td>
</tr>
<tr></tr>
</tbody>
</table>
<table class="footer" border="0" cellpadding="0" cellspacing="0" width="600">
<tbody><tr></tr>
</tbody>
</table>
</div>
</body>
</html>
*** HEADER EXTRACTED deferred/C/CE168B240D ***
content_filter: dspam-lmtp:unix:/var/spool/postfix/tmp/dspam.sock
*** MESSAGE FILE END deferred/C/CE168B240D ***
> postcat -q C4F99B24C3
*** ENVELOPE RECORDS deferred/C/C4F99B24C3 ***
message_size: 2835 616 1 0
2835
message_arrival_time: Tue Feb 16 13:10:48 2010
create_time: Tue Feb 16 13:10:48 2010
named_attribute: rewrite_context=remote
sender: [email protected]
named_attribute: log_client_name=mail.wsjf.org
named_attribute: log_client_address=66.124.67.217
named_attribute: log_client_port=59654
named_attribute: log_message_origin=mail.wsjf.org[66.124.67.217]
named_attribute: log_helo_name=mail.wsjf.org
named_attribute: log_protocol_name=ESMTP
named_attribute: client_name=mail.wsjf.org
named_attribute: reverse_client_name=mail.wsjf.org
named_attribute: client_address=66.124.67.217
named_attribute: client_port=59654
named_attribute: helo_name=mail.wsjf.org
named_attribute: client_address_type=2
named_attribute: dsn_orig_rcpt=rfc822;user[at]mydomain[dot]com
original_recipient: user[at]mydomain[dot]com
recipient: user[at]mydomain[dot]com
*** MESSAGE CONTENTS deferred/C/C4F99B24C3 ***
Received-SPF: none (bancoazzoglio.it: No applicable sender policy available)
receiver=myserver[dot]mydomain[dot]com; identity=mfrom;
envelope-from="[email protected]"; helo=mail.wsjf.org;
client-ip=66.124.67.217
Received: from mail.wsjf.org (mail.wsjf.org [66.124.67.217])
by myserver[dot]mydomain[dot]com (Postfix) with ESMTP id C4F99B24C3
for <user[at]mydomain[dot]com>; Tue, 16 Feb 2010 13:10:48 +0100 (CET)
Received: from User ([81.149.158.223]) by mail.wsjf.org with Microsoft
SMTPSVC(6.0.3790.3959);
Mon, 15 Feb 2010 01:10:45 -0800
From: "BANCO AZZOAGLIO"<[email protected]>
Subject: Confermare le sue reali informazioni.
Date: Mon, 15 Feb 2010 09:10:44 -0000
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
X-OriginalArrivalTime: 15 Feb 2010 09:10:45.0590 (UTC)
FILETIME=[C1B99F60:01CAAE1E]
To: undisclosed-recipients:;
<HTML><HEAD>
<STYLE type=text/css>
<!--
body {
background-color: #ffffff;
}
body,td,th {
color: #FFF;
}
.style1 {color: #000000}
-->
</STYLE>
<META content="MSHTML 6.00.2900.2180" name=GENERATOR></HEAD>
<BODY>
<DIV align=left>
<P class=style1><FONT face=Courier><FONT face=Courier></FONT></FONT> </P>
<P class=style1 align=left><FONT face=Courier><FONT face=Courier><FONT
face=Courier><FONT face=Courier> <IMG
src="http://www.azzoaglio.it/img/logo_topbar.gif";
vspace=30></FONT></FONT></FONT></FONT></P>
<P class="style1 style1"><FONT face=Courier><FONT
face=Courier> <SPAN class=style1>Gentile Cliente,
</SPAN></FONT></FONT></P></DIV>
<DIV class=style1 align=left><FONT face=Courier><FONT
face=Courier> Durante i regolari controlli sugli account non siamo
stati in grado di verificare le sue informazioni. <BR></FONT></FONT></DIV>
<DIV class=style1 align=left><SPAN class=style1><FONT face=Courier><SPAN><FONT
face=Courier><BR> In accordo con le regole abbiamo bisogno di
confermare le sue reali informazioni.<BR> Ã sufficiente che lei
esegua il login e completi il modulo che le forniremo.<BR> Se ciò
non dovesse avvenire saremo costretti a sospendere il suo account</FONT>.</DIV>
<P class=style1 align=left><FONT face=Courier><SPAN><SPAN
id=lw_1236221633_1> </SPAN><A
href="http://www2.scrabble-assoc.com/Images/Images/cap.htm"; target=_blank
rel=nofollow>Accedi ai servizi online »</A></FONT><FONT face=Courier
size=2><BR><BR> </FONT><FONT face=Courier>Distinti Saluti, Banco di
Credito P. Azzoaglio
S.p.A.<BR></FONT></TD></TR></TBODY></TABLE></SPAN></P></SPAN></FONT></SPAN></BODY></HTML>
*** HEADER EXTRACTED deferred/C/C4F99B24C3 ***
content_filter: dspam-lmtp:unix:/var/spool/postfix/tmp/dspam.sock
*** MESSAGE FILE END deferred/C/C4F99B24C3 ***
r...@principal(~)>
------------------------------------------------------------------------------
SOLARIS 10 is the OS for Data Centers - provides features such as DTrace,
Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
http://p.sf.net/sfu/solaris-dev2dev
_______________________________________________
Dspam-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspam-user
![http://www.popolarebari.it/img/logo_bpbari.gif"](http://www.popolarebari.it/img/logo_bpbari.gif"){kind=link}
![http://www.azzoaglio.it/img/logo_topbar.gif"](http://www.azzoaglio.it/img/logo_topbar.gif"){kind=link}