The wonderful thing about irony is that...it's so ironic.

While I've been constructively engaged with several members of this
discussion list, my email address was used as the spoofed sender of a
"hiawatha" spam originating from JANESPC at telia.com.

Naturally, I received a number of administrative bounces, mostly
nondelivery messages.  And a couple of virus warnings (I think there's a
bug in the payload, I haven't checked closely).

....and now a C-R challenge.  And of all the gin joints in the world
that had to walk into my inbox, erm, I mean C-R systems, it was.

<drum roll>

TMDA.

I'm shocked, shocked....


Of course, no irony would be complete without the additional irony:

   The site is using SpamAssassin, tagged the message as spam, and
   challenged me on it anyway.


Well, I came to SpamAssassin for the water.
The water?  But it's in the middle of the desert.
I was misinformed.



Thanks Jason, much appreciated.

This could be the start of a beautiful friendship.



on Tue, Sep 23, 2003 at 01:49:44AM -0400, [EMAIL PROTECTED] ([EMAIL PROTECTED]) wrote:
> Your e-mail message with the subject of "*****SPAM***** hiawatha"
> is being held because your address was not recognized.
> 
> To release your message for delivery, please send an empty message
> to the following address, or use your mailer's "Reply" feature.
> 
>    [EMAIL PROTECTED]
> 
> This confirmation verifies that your message is legitimate and not
> junk-mail.
> 
> [ This notice was generated by TMDA/0.58 (http://tmda.sf.net/),
>   an automated junk-mail reduction system. ]
> 
> --- Enclosed is a copy of your message.
> 
> >From [EMAIL PROTECTED]  Tue Sep 23 01:49:44 2003
> Return-Path: <[EMAIL PROTECTED]>
> Received: from m2.dnx.net (m2.dnx.net [65.192.199.23])
>       by m5.dnx.net (Postfix) with ESMTP id DCC2A63A24
>       for <[EMAIL PROTECTED]>; Tue, 23 Sep 2003 01:49:43 -0400 (EDT)
> Received: by m2.dnx.net (Postfix, from userid 500)
>       id 17F99CFBFE; Tue, 23 Sep 2003 01:49:40 -0400 (EDT)
> Received: from serv03.dnx.net (serv03.dnx.net [65.192.199.13])
>       by m2.dnx.net (Postfix) with ESMTP id 26D7ACFC1C
>       for <[EMAIL PROTECTED]>; Tue, 23 Sep 2003 01:48:08 -0400 (EDT)
> Received: from JANNESPC (h45n1fls15o1010.telia.com [217.209.206.45])
>       by serv03.dnx.net (Postfix) with SMTP id E6FCC310C0
>       for <[EMAIL PROTECTED]>; Tue, 23 Sep 2003 01:48:02 -0400 (EDT)
> From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
> To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
> Subject: *****SPAM***** hiawatha
> Date: Tue, 23 Sep 2003 7:44:36 +0200
> X-Priority: 3 (normal)
> Importance: Normal
> X-Mailer: Microsoft Outlook, Build 10.0.2627
> MIME-Version: 1.0
> Content-Type: text/html;
>       charset="iso-8859-1"
> Content-Transfer-Encoding: base64
> Message-Id: <[EMAIL PROTECTED]>
> X-Spam-Status: Yes, hits=8.4 required=5.0
>       tests=BASE64_ENC_TEXT,BIG_FONT,CARRIAGE_RETURNS,CTYPE_JUST_HTML,
>             DATE_IN_PAST_06_12,HTML_FONT_COLOR_NAME,
>             HTML_FONT_FACE_CAPS,HTTP_USERNAME_USED,INVALID_DATE,
>             ONLINE_PHARMACY,SPAM_PHRASE_02_03,UNSUB_PAGE
>       version=2.43-cvs
> X-Spam-Flag: YES
> X-Spam-Level: ********
> X-Spam-Checker-Version: SpamAssassin 2.43-cvs (1.115.2.19-2002-10-15-exp)
> 
> SPAM: -------------------- Start SpamAssassin results ----------------------
> SPAM: This mail is probably spam.  The original message has been altered
> SPAM: so you can recognise or block similar unwanted mail in future.
> SPAM: See http://spamassassin.org/tag/ for more details.
> SPAM: 
> SPAM: Content analysis details:   (8.40 hits, 5 required)
> SPAM: INVALID_DATE       (1.5 points)  Invalid Date: header (not RFC 2822)
> SPAM: ONLINE_PHARMACY    (1.2 points)  BODY: Online Pharmacy
> SPAM: SPAM_PHRASE_02_03  (0.8 points)  BODY: Spam phrases score is 02 to 03 (medium)
> SPAM:                    [score: 2]
> SPAM: BIG_FONT           (0.3 points)  BODY: FONT Size +2 and up or 3 and up
> SPAM: HTML_FONT_COLOR_NAME (0.3 points)  BODY: HTML font color has unusual name
> SPAM: HTML_FONT_FACE_CAPS (0.2 points)  BODY: HTML font face has excess capital 
> characters
> SPAM: BASE64_ENC_TEXT    (1.4 points)  RAW: Message text disguised using base-64 
> encoding
> SPAM: CARRIAGE_RETURNS   (0.3 points)  RAW: Message contains a lot of ^M characters
> SPAM: HTTP_USERNAME_USED (1.5 points)  URI: Uses a username in a URL
> SPAM: UNSUB_PAGE         (0.1 points)  URI: URL of page called "unsubscribe"
> SPAM: DATE_IN_PAST_06_12 (0.4 points)  Date: is 6 to 12 hours before Received: date
> SPAM: CTYPE_JUST_HTML    (0.4 points)  HTML-only mail, with no text version
> SPAM: 
> SPAM: -------------------- End of SpamAssassin results ---------------------
> 
> PEhUTUw+DQo8SEVBREVSPjxUSVRMRT58PC9USVRMRT48L0hFQURFUj4NCjxCT0RZIEJHQ09MT1I9
> V0hJVEU+PERJViBBTElHTj0ibGVmdCI+DQoNCjxGT05UIENPTE9SPSJCTEFDSyIgRkFDRT0iVkVS
> REFOQSIgU0laRT0iNSI+PEI+DQpEaWQgeW91IGtub3cgdGhhdCB5b3UgY2FuIG9yZGVyIGRydWdz
> IG9ubGluZSBlYXNpbHkgYW5kIHF1aWNrbHk/PEJSPjxCUj4NCkNhbid0IGdldCB0byBzbGVlcD8g
> U3VmZmVyIGZyb20gYW54aWV0eT8gV2Ugc3RvY2sgQW1iaWVuIGFuZCBTb25hdGEgb2YgY291cnNl
> LiBXYWtlIHVwIGZlZWxpbmcgZW5lcmdpc2VkITxCUj48QlI+DQpDb21lIGFuZCBicm93c2Ugbm93
> Li48QlI+PEJSPg0KPEEgSFJFRj0iaHR0cDovL3B1YkB3d3cuc3VwbXVtdXYuYml6L3JtcDY2NTIi
> Pmh0dHA6Ly9wdWJAd3d3LnJha3VyYWt1aHAuYml6L3JtcDY2NTI8L0E+PEJSPjxCUj4NCjxicj48
> YnI+PGJyPjxCcj4NCjxmb250IHNpemU9IjEiPnRvIGV4aXQ/IDxhIGhyZWY9Imh0dHA6Ly93d3cu
> c3VwbXVtdXYuYml6L3Vuc3Vic2NyaWJlLmRkZD9wdWIiPmh0dHA6Ly93d3cucmFrdXJha3VocC5i
> aXovdW5zdWJzY3JpYmUuZGRkP3B1YjwvYT4NCjwvQj48L0ZPTlQ+DQoNCjwvRElWPjwvQk9EWT4N
> CjwvSFRNTD4NCg==
> 
> 

-- 
Karsten M. Self <[EMAIL PROTECTED]>        http://kmself.home.netcom.com/
 What Part of "Gestalt" don't you understand?
    Defeat EU Software Patents!                         http://swpat.ffii.org/

Attachment: signature.asc
Description: Digital signature

_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to