RE: [Declude.JunkMail] All emails are now showing up with attachment?

2003-03-21 Thread Kami Razvan
Hi Scott:

The most peculiar indeed...  yet again you were right...

Somehow the problem is gone... I have not rebooted and no changes were made
to the rules... The problem surfaced after upgrade to 1.68i and it went away
pretty much after your reply.

Strange...  how do you know so much!

Regards,
Kami

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Thursday, March 20, 2003 12:26 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] All emails are now showing up with
attachment?



- all emails coming from Declude virus come with email showing as well 
as an attachment with the same message.

This is amazingly peculiar..

I have heard of this happening a couple times before, but never found out 
why.  It only seems to happen with Outlook, and the problem seems to just 
go away after a while.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Spaced Out

2003-03-21 Thread Charles Frolick
Sounds like this test might be a good negative weight test like
IPNOTINMX.  Of course if they use a good mailfrom it could reduce the
positive. Any thoughts?

Thanks,
Chuck Frolick
ArgoNet, Inc.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Thursday, March 20, 2003 5:59 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Spaced Out



Its a much more sensitive (strict) version of MAILFROM.  Weighted less 
than MAILFROM, it sees things that otherwise get through.  I forget
what 
it is, so Scott would have to explain what that actually is.

The standard MAILFROM test will check to see if the domain on the return

address has either an MX or A record in DNS.  So if an E-mail fails the 
MAILFROM test, the return address can't receive mail.

The strict version (defined with the mailfromstrict test type) only 
checks for the MX record.  Although a domain with an A record can
receive 
mail (if there is a mailserver at the IP corresponding to the A record
for 
the domain), it isn't advertising that it allows E-mail.  It will have
more 
false positives -- people seem to think there isn't a problem with
having 
no MX record, since the RFCs do require mailservers to attempt to send
to 
the A record if there is no MX record.
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] whitelist file

2003-03-21 Thread Bill B.
Is this syntax correct to whitelist an entire domain in the whitelist file?

@bounce.topiksolutions.com

It appears to be whitelisting everything when I add this.  We're running Declude 
v1.68i4

Thanks,
Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] whitelist file

2003-03-21 Thread Kami Razvan
Hi;

Yes but I suggest if you want to whitelist the entire domain then do it as:

.TopikSolutions.com

Or just TopikSolutions.com

That will cover all variations including personal emails from their people.

Regards,
Kami

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill B.
Sent: Friday, March 21, 2003 11:19 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] whitelist file


Is this syntax correct to whitelist an entire domain in the whitelist file?

@bounce.topiksolutions.com

It appears to be whitelisting everything when I add this.  We're running
Declude v1.68i4

Thanks,
Bill

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] whitelist file

2003-03-21 Thread Bill B.
What I am seeing is if I add any entry in my whitelist file in the follwoing format, 
it will cause ALL emails sent to the user who's whitelist file contains this entry to 
be whitelisted, regardless of the senders address.  So it appears to be a bug...

@example.com



-Original Message-
From: Kami Razvan
Sent: Fri, 21 Mar 2003 11:48:22 -0500
Subject: RE: [Declude.JunkMail] whitelist file


Hi;

Yes but I suggest if you want to whitelist the entire domain then do it as:

.TopikSolutions.com

Or just TopikSolutions.com

That will cover all variations including personal emails from their people.

Regards,
Kami

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill B.
Sent: Friday, March 21, 2003 11:19 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] whitelist file


Is this syntax correct to whitelist an entire domain in the whitelist file?

@bounce.topiksolutions.com

It appears to be whitelisting everything when I add this.  We're running
Declude v1.68i4

Thanks,
Bill

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] whitelist file

2003-03-21 Thread R. Scott Perry

Is this syntax correct to whitelist an entire domain in the whitelist file?

@bounce.topiksolutions.com

It appears to be whitelisting everything when I add this.  We're running 
Declude v1.68i4
That was changed accidentally in v1.68, but is fixed in the latest interim 
release (v1.68i5 at http://www.declude.com/release/168i/declude.exe ).
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Q: help with fixing client-side?

2003-03-21 Thread Joseph Acac
What follows is the header from an email sent from a valid account to 
another valid account, here at UCD.  The recipient was concerned that this 
message would be tagged as 'consistent with spam' and/or 'bad headers'.  My 
thoughts were that perhaps its because the user is on an older Macintosh, 
running an old version of Quick Mail, which perhaps doesn't follow standard 
email protocol/form?  Any ideas?

Thanks,

joe

X-POP3-Rcpt: [EMAIL PROTECTED]
Return-Path: [EMAIL PROTECTED]
Received: from salzburg.ucdavis.edu (salzburg.ucdavis.edu [169.237.104.162])
by orvieto.ucdavis.edu (8.11.6/8.11.0/IT4.6.2) with ESMTP id 
h2L2M1p20970
for [EMAIL PROTECTED]; Thu, 20 Mar 2003 18:22:01 
-0800 (PST)
Received: from primate.ucdavis.edu (blackhole.primate.ucdavis.edu 
[169.237.80.10])
by salzburg.ucdavis.edu (8.11.6/8.11.0/virus-scan-4.0.1) with 
ESMTP id h2L2Lwd08932
for [EMAIL PROTECTED]; Thu, 20 Mar 2003 18:21:59 -0800 (PST)
Received: from 169.237.80.51 [169.237.80.51] by primate.ucdavis.edu
  (SMTPD32-7.13) id A7451A730278; Thu, 20 Mar 2003 18:21:57 -0800
Date: 20 Mar 03 18:30:01 -0800
From: Alice Tarantal [EMAIL PROTECTED]
Subject: RE: Pilot call
To: John Capitanio [EMAIL PROTECTED]
X-Mailer: QuickMail Pro 1.5.4 (Mac)
X-Priority: 3
MIME-Version: 1.0
Reply-To: Alice Tarantal [EMAIL PROTECTED]
Content-Type: text/plain; charset=iso-8859-1
Message-Id: [EMAIL PROTECTED]
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client 
[c014020e].
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam 
[c014020e].
X-RBL-Warning: WEIGHT10: Weight of 11 reaches or exceeds the limit of 10.
X-Declude-Sender: [EMAIL PROTECTED] [169.237.80.51]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for 
spam.
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by orvieto.ucdavis.edu 
id h2L2M1p20970


Joseph C. Acac
CNPRC
University of California at Davis
[EMAIL PROTECTED] 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Q: help with fixing client-side?

2003-03-21 Thread R. Scott Perry

What follows is the header from an email sent from a valid account to 
another valid account, here at UCD.  The recipient was concerned that this 
message would be tagged as 'consistent with spam' and/or 'bad 
headers'.  My thoughts were that perhaps its because the user is on an 
older Macintosh, running an old version of Quick Mail, which perhaps 
doesn't follow standard email protocol/form?  Any ideas?
The E-mail failed both the SPAMHEADERS test (which detects legal but 
spam-like headers, that are not sent by normal mail clients) and the 
BADHEADERS test (which detects broken spam-like headers, that are not sent 
by normal mail clients).

This is one of the nasty cases where there are multiple intertwined problems:

Date: 20 Mar 03 18:30:01 -0800
This causes the BADHEADERS test to get triggered, because the E-mail was 
supposedly sent in 1903.  That's before computers were invented.  In 
real-life terms, their mail client is not Y2K compliant (and not compliant 
to the RFCs as of the early 1990s, where the Y2K issue was identified).  It 
should be sending 4-digit years.

Message-Id: [EMAIL PROTECTED]
This is a dual (intertwined) problem, that causes both the SPAMHEADERS and 
BADHEADERS tests to fail.

It fails the SPAMHEADERS test because the Message-ID: wasn't included in 
the E-mail that was sent.  This one here was added by IMail.

It also fails the BADHEADERS test because the Message-ID: header is 
broken.  That's because it says that 169.237.80.51 is a hostname (if an 
IP, it would appear as [EMAIL PROTECTED]), but it isn't a 
hostname.  IMail did that because the mail client claimed to be an Internet 
host 169.237.80.51 (via the HELO/EHLO data), but again, that isn't a 
valid hostname.

So the mail client really needs to be fixed.  :)
   -Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] 1.68 - new variables

2003-03-21 Thread Andy Schmidt
Hi:

Adds %IP4R%, %RHSBL%, %MAILFROMBL% and %HELO% variables.

Okay, I can guess what IP4R and HELO inserts - but what do strings do the
two ...BLs insert?

Where are those variables valid?

A) in Declude SMTP headers?

B) in alert/bounce messages templates?

C) in ... ?


Best Regards
Andy Schmidt

HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

http://www.HM-Software.com/

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] 1.68 - new variables

2003-03-21 Thread R. Scott Perry

Adds %IP4R%, %RHSBL%, %MAILFROMBL% and %HELO% variables.

Okay, I can guess what IP4R and HELO inserts - but what do strings do the
two ...BLs insert?
Good question.  :)

%IP4R% inserts the IP address in the format for ip4r-style spam databases 
(if the IP is 192.0.2.25, it will return 25.2.0.192).
%RHSBL% inserts the Right-Hand-Side information from the return address 
(declude.com for [EMAIL PROTECTED])
%MAILFROMBL% will return the MAIL FROM data in the format needed for spam 
databases (horizons.declude.com)
%HELO% inserts the HELO/EHLO data that the remote mailserver reported

Where are those variables valid?

A) in Declude SMTP headers?

B) in alert/bounce messages templates?

C) in ... ?
Although they may work anywhere that variables can be used, they were 
designed for the new dnsbl test type, which lets you define unusual 
DNS-based spam tests (such as ones that check the HELO data rather than the 
IP address).  However, they could also be used in the headers or in 
alert/bounce messages.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Headers Changing On Outbound Attached Message

2003-03-21 Thread Darrell LaRock
I am using the copyto function to route a copy of any message that fails
the sniffer test to my email box.

If the message is a false positive I then insert the false positive
message into another email and send it off to the folks at sniffer.
What we found today is that for some reason headers are being inserted
into the false positive attached message from Outlook? Also, it is
inserting several other headers like altering the message id.

Example of headers in message before forwarding it out as attached
message

Received: from sender0012.lodo.exactis.com [64.208.135.32] by
mail1.gannett-tv.com with ESMTP
  (SMTPD32-7.12) id A91A577000EA; Fri, 21 Mar 2003 13:25:30 -0500
Received: by sender0012.lodo.exactis.com
  (queueup version 6.2: Copyright 2000 Experian, Inc. All rights
reserved.)
  with stdio id KARE11_AAAJL29299; Fri, 21 Mar 2003 11:23:50 MST
Date: Fri, 21 Mar 2003 18:17:12 UT
From: Tribune Alerts
[EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Reply-To: Tribune Alerts
[EMAIL PROTECTED]
Errors-To:
[EMAIL PROTECTED]
Message-Id: [EMAIL PROTECTED]
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=ISO-8859-1
MIME-Version: 1.0
Subject: [POTENTIAL SPAM]'Shock and awe'
X-Mailer: Experian ContactMail Build v1.89  (Using MIME::Lite v2.117 )
X-RBL-Warning: OSSRC: Experian GBX-REQ6714-1 Spammed
[EMAIL PROTECTED] Was: 64.208.135.177 from
bog0007.lodo.exactis.com (bog0007.lodo.exactis.com [64.208.135.177]) by
relays.osirusoft.com
X-Declude-Sender:
[EMAIL PROTECTED]
[64.208.135.32]
X-Declude-Spoolname: D591a577000eadda1.SMD
X-RCPT-TO: [EMAIL PROTECTED]
Status: U
X-UIDL: 348193479

Example of headers When they receive it and view the attached message

Reply-To: Tribune Alerts
[EMAIL PROTECTED]
From: Tribune Alerts
[EMAIL PROTECTED]
To: Daly, Mark [EMAIL PROTECTED]
Subject: [POTENTIAL SPAM]'Shock and awe'
Date: Fri, 21 Mar 2003 13:17:12 -0500
Message-ID:
[EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary==_NextPart_000_016D_01C2EFD4.31C710F0
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2627
X-Declude-Sender:
[EMAIL PROTECTED]
[64.208.135.32]
X-Declude-Spoolname: D591a577000eadda1.SMD
X-RCPT-TO: [EMAIL PROTECTED]
X-UIDL: 348193479
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: OSSRC: Experian GBX-REQ6714-1 Spammed
[EMAIL PROTECTED] Was: 64.208.135.177 from
bog0007.lodo.exactis.com (bog0007.lodo.exactis.com
[64.208.135.177]) by relays.osirusoft.com
Importance: Normal

Why would Outlook be altering an attached message?

Darrell


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Q: help with fixing client-side?

2003-03-21 Thread Dan Patnode
I have some insight on the date issue.  

Macs tell time by counting the amount of time since a date in 1903 (something to do 
with the Wright Brothers), used as time zero.  It makes them automatically y2k savvy, 
but it also means that when a particular machine's been around long enough for the 
clock battery to die, they reset to time zero (1903).

Dan



On Friday, March 21, 2003 10:24, Joseph Acac [EMAIL PROTECTED] wrote:
What follows is the header from an email sent from a valid account to 
another valid account, here at UCD.  The recipient was concerned that this 
message would be tagged as 'consistent with spam' and/or 'bad headers'.  My 
thoughts were that perhaps its because the user is on an older Macintosh, 
running an old version of Quick Mail, which perhaps doesn't follow standard 
email protocol/form?  Any ideas?

Thanks,

joe

X-POP3-Rcpt: [EMAIL PROTECTED]
Return-Path: [EMAIL PROTECTED]
Received: from salzburg.ucdavis.edu (salzburg.ucdavis.edu [169.237.104.162])
 by orvieto.ucdavis.edu (8.11.6/8.11.0/IT4.6.2) with ESMTP id 
 h2L2M1p20970
 for [EMAIL PROTECTED]; Thu, 20 Mar 2003 18:22:01 
 -0800 (PST)
Received: from primate.ucdavis.edu (blackhole.primate.ucdavis.edu 
[169.237.80.10])
 by salzburg.ucdavis.edu (8.11.6/8.11.0/virus-scan-4.0.1) with 
 ESMTP id h2L2Lwd08932
 for [EMAIL PROTECTED]; Thu, 20 Mar 2003 18:21:59 -0800 (PST)
Received: from 169.237.80.51 [169.237.80.51] by primate.ucdavis.edu
   (SMTPD32-7.13) id A7451A730278; Thu, 20 Mar 2003 18:21:57 -0800
Date: 20 Mar 03 18:30:01 -0800
From: Alice Tarantal [EMAIL PROTECTED]
Subject: RE: Pilot call
To: John Capitanio [EMAIL PROTECTED]
X-Mailer: QuickMail Pro 1.5.4 (Mac)
X-Priority: 3
MIME-Version: 1.0
Reply-To: Alice Tarantal [EMAIL PROTECTED]
Content-Type: text/plain; charset=iso-8859-1
Message-Id: [EMAIL PROTECTED]
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client 
[c014020e].
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam 
[c014020e].
X-RBL-Warning: WEIGHT10: Weight of 11 reaches or exceeds the limit of 10.
X-Declude-Sender: [EMAIL PROTECTED] [169.237.80.51]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for 
spam.
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by orvieto.ucdavis.edu 
id h2L2M1p20970


Joseph C. Acac
CNPRC
University of California at Davis
[EMAIL PROTECTED] 

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re[2]: [Declude.JunkMail] Q: help with fixing client-side?

2003-03-21 Thread Eje Gustafsson
Not sure where your getting 1903 etc from but that is besides the
point.

The main problem in this mess is among other things this line

Date: 20 Mar 03 18:30:01 -0800

A correct date according to the RFC should read
Date: 20 Mar 2003 18:30:01 -0800

The mac I seen resets back to 1980 when the batteries dies in them and
I think they use regular unix EPOC just like allot of other systems out
there when your dealing with system time (seconds since 1970 Jan 1
00:00:00).

- Eje

Friday, March 21, 2003, 7:30:30 PM, you wrote:

DP I have some insight on the date issue.  

DP Macs tell time by counting the amount of time since a date in 1903 (something to 
do with the Wright Brothers), used as time zero.  It makes them automatically y2k 
savvy, but it also means that
DP when a particular machine's been around long enough for the clock battery to die, 
they reset to time zero (1903).

DP Dan



DP On Friday, March 21, 2003 10:24, Joseph Acac [EMAIL PROTECTED] wrote:
What follows is the header from an email sent from a valid account to 
another valid account, here at UCD.  The recipient was concerned that this 
message would be tagged as 'consistent with spam' and/or 'bad headers'.  My 
thoughts were that perhaps its because the user is on an older Macintosh, 
running an old version of Quick Mail, which perhaps doesn't follow standard 
email protocol/form?  Any ideas?

Thanks,

joe

X-POP3-Rcpt: [EMAIL PROTECTED]
Return-Path: [EMAIL PROTECTED]
Received: from salzburg.ucdavis.edu (salzburg.ucdavis.edu [169.237.104.162])
 by orvieto.ucdavis.edu (8.11.6/8.11.0/IT4.6.2) with ESMTP id 
 h2L2M1p20970
 for [EMAIL PROTECTED]; Thu, 20 Mar 2003 18:22:01 
 -0800 (PST)
Received: from primate.ucdavis.edu (blackhole.primate.ucdavis.edu 
[169.237.80.10])
 by salzburg.ucdavis.edu (8.11.6/8.11.0/virus-scan-4.0.1) with 
 ESMTP id h2L2Lwd08932
 for [EMAIL PROTECTED]; Thu, 20 Mar 2003 18:21:59 -0800 (PST)
Received: from 169.237.80.51 [169.237.80.51] by primate.ucdavis.edu
   (SMTPD32-7.13) id A7451A730278; Thu, 20 Mar 2003 18:21:57 -0800
Date: 20 Mar 03 18:30:01 -0800
From: Alice Tarantal [EMAIL PROTECTED]
Subject: RE: Pilot call
To: John Capitanio [EMAIL PROTECTED]
X-Mailer: QuickMail Pro 1.5.4 (Mac)
X-Priority: 3
MIME-Version: 1.0
Reply-To: Alice Tarantal [EMAIL PROTECTED]
Content-Type: text/plain; charset=iso-8859-1
Message-Id: [EMAIL PROTECTED]
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client 
[c014020e].
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam 
[c014020e].
X-RBL-Warning: WEIGHT10: Weight of 11 reaches or exceeds the limit of 10.
X-Declude-Sender: [EMAIL PROTECTED] [169.237.80.51]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for 
spam.
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by orvieto.ucdavis.edu 
id h2L2M1p20970


Joseph C. Acac
CNPRC
University of California at Davis
[EMAIL PROTECTED] 

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


DP ---
DP [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

DP ---
DP This E-mail came from the Declude.JunkMail mailing list.  To
DP unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
DP type unsubscribe Declude.JunkMail.  The archives can be found
DP at http://www.mail-archive.com.
DP ---
DP [This E-mail scanned for viruses by Declude Virus]



Best regards,
 Eje Gustafsson   mailto:[EMAIL PROTECTED]
---
The Family Entertainment Network  http://www.fament.com
Phone : 620-231-  Fax   : 620-231-4066
eBay UserID : macahan
  - Your Full Time Professionals -

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.