>Looks like there's more than just the Date field in the headers of this one.
Well, let's see...
The X-Authentication-Warning: <words> Along with X-Mailer: <words> is a sign of
a particular hunk of ratware. About half the time Subject <words> will also
occur. I've got a set of rules that catch these combinations. When I get home
later I'll try to remember to post them.
Along with that, in this particular case there are all kinds of things wrong.
1. Message-ID: is bogus.
2. References: and In-Reply-To: are bogus.
3. References, In-Reply-To headers, but no Re: on the subject (legal but a
little strange).
4. Also the refs and in-reply don't reference the same message id, whcih I
think is a little odd.
5. Date: is obviously bogus
6. Transport used for sending seems unlikely.
7. From and Reply-To use same quoted name but different user ids, a little
strange (but legal).
Return-Path: <[EMAIL PROTECTED]>
Received: from wnpgmb09dc1-77-214.res.mts.net (wnpgmb09dc1-77-214.res.mts.net
[142.161.77.214])
by mailhost.idcomm.com (Postfix) with SMTP id 7BFFDA398656
for <[EMAIL PROTECTED]>; Fri, 26 Mar 2004 08:25:37 -0700 (MST)
Received: from [27.140.26.124] by 142.161.77.214 with houseboat SMTP;
%CURRENT_DATE_TIME
X-Authentication-Warning: drugstore cackle compass
Date: %CURRENT_DATE_TIME
From: "Meghan Esparza" <[EMAIL PROTECTED]>
Reply-To: "Meghan Esparza" <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: nuclear dc
References: <[EMAIL PROTECTED]>
In-Reply-To: <[EMAIL PROTECTED]>
X-Mailer: m
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
