You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by jdow <jd...@earthlink.net> on 2005/07/01 03:08:43 UTC

Aren't these headers interesting....

===8<---
Return-Path: <Cl...@email.com>
Received: from localhost (localhost.localdomain [127.0.0.1])
 by morticia.wizardess.wiz (8.13.4/8.13.4) with ESMTP id j610vrLL025440
 for <jd...@morticia.wizardess.wiz>; Thu, 30 Jun 2005 17:57:53 -0700
Status: OU
Received: from smtp.earthlink.net [209.86.93.202]
 by localhost with POP3 (fetchmail-6.2.5)
 for jdow@morticia.wizardess.wiz (single-drop); Thu, 30 Jun 2005
17:57:53 -0700 (PDT)
Received: from 209.86.93.231 ([218.76.5.120])
 by mx-jacana.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id
1dO9PG1VI3Nl34e0
 Thu, 30 Jun 2005 20:55:59 -0400 (EDT)
Received: from [192.168.1.0] ([218.76.5.120])
        by email.com (Sendmail 8.0.1) with ESMTP (SSL) id IYT20168
        for <im...@earthlink.net>; Thu, 30 Jun 2005 20:56:13 -0500
Message-ID: <27...@email.com>
Date: Thu, 30 Jun 2005 20:56:13 -0500
From: "Dora Sheets" <Cl...@email.com>
User-Agent: The Bat! 1.96
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: imex21@earthlink.net
Subject: Hot-Stock-tip for Savvy investors detour neon
Content-Type: multipart/related;
 boundary="------------6117780567137114"
X-Spam-Status: No, hits=-6.00 required=5.00 tests=COMES_FROM_TRUSTED_SOURCE
 version=3.2
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 3.1 (1.3) on email.com
X-ELNK-AV: 0
X-BOO: Scanned
X-Jdow: user procmail
X-IMAPbase: 1119863107 4115
X-UID: 4112
Content-Length: 45551
X-Keywords:
===8<---

Now, SpamAssassin here is not run before the "X-BOO:" (name obfuscated)
header. And SpamAssassin markup is supposed to happen after that point.
It appears this sailed right through without SpamAssassin remarking it.
Now to go to procmail and strip that nasty set of headers before it gets
into the system.

{^_^}