MacGroup: Fwd:

[Henri Yandell]

In this case it really is empty. Turns out I lied, my personal account has
been getting them, but SpamAssassin has happily been catching them.

------------=_410B9BF5.46402D40------------
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Return-Path: <rpsne at goldmail.ru>
X-Original-To: henri at yandell.org
Delivered-To: hen at flamefew.net
Received: from 68-189-63-62.ca.charter.com
(68-189-63-62.ca.charter.com [68.189.63.62])
        by orinoco.flamefew.net (Postfix on Linux (i386)) with SMTP id 
3D9963D116
        for <henri at yandell.org>; Sat, 31 Jul 2004 09:17:41 -0400 (EDT)
X-Message-Info: H[1
Message-Id: <20040731131741.3D9963D116 at orinoco.flamefew.net>
Date: Sat, 31 Jul 2004 09:17:41 -0400 (EDT)
From: [EMAIL PROTECTED]
To: undisclosed-recipients:;


------------=_410B9BF5.46402D40--------------

Very bizarre. Possibly it's just checking to see if the email address
accepts the email, and therefore probably exists. Much the same as Bill's
HREF below, but not tied to a mail client that is showing images. However,
many mail servers DROP rather than REJECT, so it's only useful if the mail
server is rejecting fred at yandell.org but allow hen at yandell.org. (Must
check if mine is dropping).

Hen

On Sat, 31 Jul 2004, Bill Holt wrote:

> You might want to look at the source code.  Spammers will sometimes send
> lots of seemingly blank messages, but instead of being truly blank, they'll
> contain an html code snipit that one would normally expect to display a
> graphic.
>
> For example, it might read:
>
> HREF="http://www.spammersdomain.com/D845TF5O0.jpg";
>
> which is actually a link to nothing.  However, when your email program
> attempts to fetch and render the picture that's expected, the spammer's
> server log records an error and the name of the file that was sought.  The
> reason the spammer does this is that he's assigned a unique code to each
> email address in his list (in the above that name is "D845TF5O0") so that
> when your email program attempts to render the non-existent image, he
> receives positive confirmation that your email address is valid and active.
> Then, of course, he sells your address along with the others that he's
> tested as a list of confirmed addresses to other spammers.
>
> That's one reason that spam control at the isp level is more effective than
> spam control on your computer ... it often prevents these address
> validations.
>
>   Bill Holt
>
> > From: "George H. Yankey" <jeffco13 at bellsouth.net>
> > Reply-To: macgroup at erdos.math.louisville.edu
> > Date: Sat, 31 Jul 2004 13:59:53 -0400
> > To: macgroup at erdos.math.louisville.edu
> > Subject: Re: MacGroup: Fwd:
> >
> > Hen, That is what happens to me also. No sender and no address.
> > George
> > On Saturday, July 31, 2004, at 01:02  PM, Henri Yandell wrote:
> >
> >>
> >> I've received a few of these at work, though oddly not on my noisier
> >> spampot of a personal email.
> >>
> >> They appear to be completely empty to MS Outlook, no subject, no sender
> >> etc.
> >>
> >> Hen
> >>
> >> On Sat, 31 Jul 2004, Mike Watkins wrote:
> >>
> >>> George,
> >>> What Message? This is all I got in your E-mail.
> >>> Mike
> >>>
> >>>
> >>> On Saturday, July 31, 2004, at 08:19  AM, George H. Yankey wrote:
> >>>
> >>>> I keep getting the following  message in my E-mail.  What does it
> >>>> mean?  Why does it show up two or three times a week?
> >>>>
> >>>> George Yankey
> >>>>
> >>>> Begin forwarded message:
> >>>>
> >>>>> Date: Sat Jul 31, 2004  7:15:10  AM US/Eastern
> >>>>>
> >>>>
> >>>>
> >>>>
> >>>> | The next meeting of the Louisville Computer Society will
> >>>> | be July 27. The LCS Web page is <http://www.kymac.org>.
> >>>> | List posting address: <mailto:macgroup at erdos.math.louisville.edu>
> >>>> | List Web page: <http://erdos.math.louisville.edu/macgroup>
> >>>>
> >>>
> >>>
> >>>
> >>> | The next meeting of the Louisville Computer Society will
> >>> | be July 27. The LCS Web page is <http://www.kymac.org>.
> >>> | List posting address: <mailto:macgroup at erdos.math.louisville.edu>
> >>> | List Web page: <http://erdos.math.louisville.edu/macgroup>
> >>>
> >>
> >>
> >>
> >> | The next meeting of the Louisville Computer Society will
> >> | be July 27. The LCS Web page is <http://www.kymac.org>.
> >> | List posting address: <mailto:macgroup at erdos.math.louisville.edu>
> >> | List Web page: <http://erdos.math.louisville.edu/macgroup>
> >>
> >
> >
> >
> > | The next meeting of the Louisville Computer Society will
> > | be July 27. The LCS Web page is <http://www.kymac.org>.
> > | List posting address: <mailto:macgroup at erdos.math.louisville.edu>
> > | List Web page: <http://erdos.math.louisville.edu/macgroup>
> >
>
>
>
> | The next meeting of the Louisville Computer Society will
> | be July 27. The LCS Web page is <http://www.kymac.org>.
> | List posting address: <mailto:macgroup at erdos.math.louisville.edu>
> | List Web page: <http://erdos.math.louisville.edu/macgroup>
>



| The next meeting of the Louisville Computer Society will
| be July 27. The LCS Web page is <http://www.kymac.org>.
| List posting address: <mailto:macgroup at erdos.math.louisville.edu>
| List Web page: <http://erdos.math.louisville.edu/macgroup>