Every once in a while I see something like this insertion at the top of
a message

> This message has been processed by Symantec's AntiVirus Technology.
> 
> quoting Gregory K. Ruiz-Ade as of Mon, May 12, 2008 at 03:05:31PM -0700: was 
> not scanned for viruses because of the error: DECERR_CHILD_EXTRACT
> 
> 
> For more information on antivirus tips and technology, visit
> http://ses.symantec.com/
> 
> 
> 
> Subject:
> Re: Do you think ads on web sites are a turn off? Do you ever *use* them?
> From:
> SJS <[EMAIL PROTECTED]>
> Date:
> Mon, 12 May 2008 15:29:27 -0700
> To:
> Main Discussion List for KPLUG <[email protected]>
> Received:
> from cdptpa-mxlb.mail.rr.com ([10.127.255.8]) by cdptpa-imta06.mail.rr.com 
> with ESMTP id <[EMAIL PROTECTED]>; Mon, 12 May 2008 22:29:35 +0000
> X-IronPort:
> cdptpa-mx05.mail.rr.com 404150131
> X-RR-Connecting-IP:
> 63.98.246.161
> Received:
> from sparkplug.kernel-panic.org ([63.98.246.161]) by cdptpa-mxlb.mail.rr.com 
> with ESMTP; 12 May 2008 22:29:34 +0000
> Received:
> from sparkplug.kernel-panic.org (localhost.localdomain [127.0.0.1]) by 
> sparkplug.kernel-panic.org (Postfix) with ESMTP id 931A7978C4; Mon, 12 May 
> 2008 15:29:32 -0700 (PDT)
> X-Original-To:
> [email protected]
> Delivered-To:
> [email protected]
> Received:
> from maui.doit.org (doit.org [199.184.188.17]) by sparkplug.kernel-panic.org 
> (Postfix) with ESMTP id 6D590978A3 for <[email protected]>; Mon, 12 
> May 2008 15:29:29 -0700 (PDT)
> Received:
> by maui.doit.org (Postfix, from userid 1033) id E39F6CD902; Mon, 12 May 2008 
> 15:29:27 -0700 (PDT)
> Message-ID:
> <[EMAIL PROTECTED]>
> References:
> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL 
> PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
> MIME-Version:
> 1.0
> Content-Type:
> text/plain; charset=us-ascii
> Content-Disposition:
> inline
> In-Reply-To:
> <[EMAIL PROTECTED]>
> X-Message-Flag:
> UNIX has been doing it better, for longer.
> X-Complaints:
> [EMAIL PROTECTED]
> X-Notice-0:
> Broken MUAs will have difficulty reading replies.
> X-Notice-1:
> If you can't read what I've written, use a different MUA,
> X-Notice-2:
> or try saving as text, then examining with a text editor.
> X-PGP-Key:
> http://www.stremler.net/gpg/[EMAIL PROTECTED]
> User-Agent:
> Mutt/1.5.9i
> X-BeenThere:
> [email protected]
> X-Mailman-Version:
> 2.1.5
> Precedence:
> list
> Reply-To:
> Main Discussion List for KPLUG <[email protected]>
> List-Id:
> Main Discussion List for KPLUG <kplug-list.kernel-panic.org>
> List-Unsubscribe:
> <http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list>, 
> <mailto:[EMAIL PROTECTED]>
> List-Archive:
> <http://www.kernel-panic.org/pipermail/kplug-list>
> List-Post:
> <mailto:[email protected]>
> List-Help:
> <mailto:[EMAIL PROTECTED]>
> List-Subscribe:
> <http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list>, 
> <mailto:[EMAIL PROTECTED]>
> Sender:
> [EMAIL PROTECTED]
> Errors-To:
> [EMAIL PROTECTED]

The message has no such insertion in our archives
  http://www.kernel-panic.org/pipermail/kplug-list/2008-May/101077.html
and for the record, was from SJS, included a quote of GKRA, and
continues as archived

> begin  quoting Gregory K. Ruiz-Ade as of Mon, May 12, 2008 at 03:05:31PM 
> -0700:
>> > On May 12, 2008, at 1:41 PM, SJS wrote:
>> > 
>>> > >Of course, a lot of software complains and dies if it can't talk to
>>> > >the mothership; and then there's the ever-present problem of a  
>>> > >misclick turning off ALL access...
>> > 
>> > You can always go into the rule editor and fix mistakes later.
> 
> Yup.
 ..more (snipped)..


I am puzzled about:

1) Why the message-insertion appears  ..what is there in the message
that triggers it? Is it tied to 'DECERR_CHILD_EXTRACT' whatever that
means? A Google-try doesn't seem helpful at first glance.

2) I guess the insertion must be coming from roadrunner, even though I
have spam filtering turned off -- is that likely? It's not our list
mailer is it? Where else could it come from but rr?


Looking at the full headers shows this part (1 line overlap with
previous quote shown for context )
> Errors-To: [EMAIL PROTECTED]
> Mime-Version: 1.0
> Content-Type: multipart/mixed;
>       boundary="GKMOPRTVWYabdfhikmnprtuwy013578ACDFHJKMO"
> X-BLTSYMAVREINSERT: KOwpxEMoRkjY0htRNK52eDtX2qEA
> 
> This is a multi-part message in MIME format.
> --GKMOPRTVWYabdfhikmnprtuwy013578ACDFHJKMO
> Content-Type: text/plain; charset=us-ascii
> Content-Transfer-Encoding: 7bit
> 
> This message has been processed by Symantec's AntiVirus Technology.

Regards,
..jim


-- 
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to