You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris Santerre <cs...@MerchantsOverseas.com> on 2004/08/16 20:20:02 UTC

Empty replies

Has anyone been getting empty replies from other lists members?  Check the
headers for spoofs. Something seems amist! Or it could be my paranoid side.

Chris Santerre 
System Admin and SARE Ninja
http://www.rulesemporium.com
http://www.surbl.org
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
Charles Darwin 

Re: Empty replies

Posted by Steven Dickenson <st...@mrchuckles.net>.
Chris Santerre wrote:
> Has anyone been getting empty replies from other lists members?  Check the
> headers for spoofs. Something seems amist! Or it could be my paranoid side.

I got four, all of them in relation to threads I had already responded 
to.  One of them was "from" you, Chris.  Unfortunately, I've already 
deleted them and haven't received any since.

They also were in my Inbox, instead of filtered into my SA-Talk folder. 
  I filter on the Mailing-List header.

Steven
--
Steven Dickenson <st...@mrchuckles.net>
http://www.mrchuckles.net


Re: Empty replies

Posted by Alex S Moore <as...@edge.net>.
On Mon, 2004-08-16 at 13:20, Chris Santerre wrote:
> Has anyone been getting empty replies from other lists members?  Check the
> headers for spoofs. Something seems amist! Or it could be my paranoid side.

Yes, I got some for a topic that I have tried to provide help.  The
topic was "RE: Error starting spamd"

Alex


Re: Empty replies

Posted by LuKreme <kr...@kreme.com>.
On 16 Aug 2004, at 12:20, Chris Santerre wrote:
> Has anyone been getting empty replies from other lists members?  Check 
> the
> headers for spoofs. Something seems amist! Or it could be my paranoid 
> side.

I received an empty email in reply to my post yesterday

> Return-Path: <no...@firstlink.com>
> X-Original-To: kremels@kreme.com
> Delivered-To: kremels@covisp.net
> X-Greylist: delayed 1361 seconds by postgrey-1.14 at akane.covisp.net; 
> Sun, 15 Aug 2004 21:59:55 MDT
> Received: from mail2.firstlink.com (mail2.firstlink.com [66.37.141.26])
> 	by mail.covisp.net (Postfix) with ESMTP id C8640118AD0E
> 	for <kr...@kreme.com>; Sun, 15 Aug 2004 21:59:55 -0600 (MDT)
> Received: by mail2.firstlink.com (Postfix, from userid 60001)
> 	id B5EFEE6D81; Sun, 15 Aug 2004 21:35:44 -0600 (MDT)
> From: spamassassin-users@incubator.apache.org
> Content-Type: text/plain; charset=iso-8859-1
> Content-Transfer-Encoding: 8bit
> Comment: Autoresponder, First Link Technology;
> To: kremels@kreme.com
> Subject: Re: Whitelist_from_Rcvd (again)
> Message-Id: <20...@mail2.firstlink.com>
> Date: Sun, 15 Aug 2004 21:35:44 -0600 (MDT)
> X-Covisp: 64.140.43.68
> X-Spam-Checker-Version: SpamAssassin 3.0.0-pre4 (2004-08-04) on
> 	akane.covisp.net
> X-Spam-Level:
> X-Spam-Status: No, hits=0.7 required=5.0 tests=BAYES_50=0.001,
> 	DNS_FROM_RFC_ABUSE=0.454,NO_REAL_NAME=0.243 bayes=0.4999 autolearn=no
> 	version=3.0.0-pre4
>
>

That's the entire message.

Is it a borked vacation script?

-- 
Growing up leads to growing old, and then to dying/And dying to me 
don't sound like all that much fun.


Re: Empty replies

Posted by Keith Ivey <kc...@cpcug.org>.
On Mon, 16 Aug 2004, Vivek Khera wrote:

> these "firstlink.com" people have been polluting the postfix users 
> mailing list as well.

I got one "replying" to a post of mine on the MySQL list.
Coming from same IP address (corresponding to mail3.firstlink.com)
with same distinctive headers.

-- 
Keith C. Ivey <kc...@cpcug.org>
Washington, DC 


Re: Empty replies

Posted by Vivek Khera <vi...@khera.org>.
these "firstlink.com" people have been polluting the postfix users 
mailing list as well.

On Aug 16, 2004, at 2:37 PM, Dougie Nisbet wrote:

> On Monday 16 August 2004 19:20, Chris Santerre wrote:
>> Has anyone been getting empty replies from other lists members?  
>> Check the
>> headers for spoofs. Something seems amist! Or it could be my paranoid 
>> side.
>
>
> I got the following blank email. It appeared in my inbox rather than 
> being
> filtered into my SA folder (kmail) so something in my filter must've 
> not
> triggered:
>


Re: Empty replies

Posted by jdow <jd...@earthlink.net>.
You filter Spamassassin-User email based on the "from:"? It looks like
the entire message is a forgery from top to bottom. It should trigger
any number of sanity filters.
{^_^}
----- Original Message ----- 
From: "Dougie Nisbet" <do...@highmoor.co.uk>


> On Monday 16 August 2004 19:20, Chris Santerre wrote:
> > Has anyone been getting empty replies from other lists members?  Check
the
> > headers for spoofs. Something seems amist! Or it could be my paranoid
side.
>
>
> I got the following blank email. It appeared in my inbox rather than being
> filtered into my SA folder (kmail) so something in my filter must've not
> triggered:
>
> Return-Path: <po...@highmoor.co.uk>
> X-Original-To: dougie
> Delivered-To: dougie@highmoor.co.uk
> Received: by nick (Postfix, from userid 1001)
> id D2C3646BFC; Mon, 16 Aug 2004 07:59:41 +0100 (BST)
> X-Original-To: postie@localhost
> Delivered-To: postie@localhost
> Received: from localhost (homelan [127.0.0.1])
> by nick (Postfix) with ESMTP id 5A89B46BFC
> for <po...@localhost>; Mon, 16 Aug 2004 07:59:20 +0100 (BST)
> Delivered-To: ri_plusn-ripple-dougie@highmoor.co.uk
> Received: from mail.plus.net [212.159.10.1]
> by localhost with POP3 (fetchmail-6.2.5)
> for postie@localhost (single-drop); Mon, 16 Aug 2004 07:59:20 +0100 (BST)
> Received: (qmail 73310 invoked from network); 16 Aug 2004 06:53:06 -0000
> Received: from unknown (HELO ptb-mxcore01.plus.net) (212.159.14.215)
>   by ptb-mailstore03.plus.net with SMTP; 16 Aug 2004 06:53:06 -0000
> Received: from mail3.firstlink.com ([66.37.141.15])
> by ptb-mxcore01.plus.net with esmtp (Exim 4.30; FreeBSD)
> id 1BwbMg-000GsR-0E
> for dougie@highmoor.co.uk; Mon, 16 Aug 2004 06:53:06 +0000
> Received: by mail3.firstlink.com (Postfix, from userid 60001)
> id D0E7EE15AD; Mon, 16 Aug 2004 00:52:59 -0600 (MDT)
> From: spamassassin-users@incubator.apache.org
> Content-Type: text/plain;
>   charset=iso-8859-1
> Comment: Autoresponder, First Link Technology;
> To: dougie@highmoor.co.uk
> Subject: Re: SA Users whitelisting/Bayes question
> Message-Id: <20...@mail3.firstlink.com>
> Date: Mon, 16 Aug 2004 00:52:59 -0600 (MDT)
> Content-Transfer-Encoding: quoted-printable
> X-Holme-Dene-MailScanner: Found to be clean, Found to be clean
> X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on nick.homelan
> X-Spam-Level:
> X-Spam-Status: No, hits=0.2 required=5.0 tests=BAYES_44,NO_REAL_NAME
> autolearn=no version=2.63
> X-MailScanner-From: postie@highmoor.co.uk
> Status: R
> X-Status: N
> X-KMail-EncryptionState:
> X-KMail-SignatureState:
> X-KMail-MDN-Sent:


Re: Empty replies

Posted by Dougie Nisbet <do...@highmoor.co.uk>.
On Monday 16 August 2004 19:20, Chris Santerre wrote:
> Has anyone been getting empty replies from other lists members?  Check the
> headers for spoofs. Something seems amist! Or it could be my paranoid side.


I got the following blank email. It appeared in my inbox rather than being 
filtered into my SA folder (kmail) so something in my filter must've not 
triggered:

Return-Path: <po...@highmoor.co.uk>
X-Original-To: dougie
Delivered-To: dougie@highmoor.co.uk
Received: by nick (Postfix, from userid 1001)
	id D2C3646BFC; Mon, 16 Aug 2004 07:59:41 +0100 (BST)
X-Original-To: postie@localhost
Delivered-To: postie@localhost
Received: from localhost (homelan [127.0.0.1])
	by nick (Postfix) with ESMTP id 5A89B46BFC
	for <po...@localhost>; Mon, 16 Aug 2004 07:59:20 +0100 (BST)
Delivered-To: ri_plusn-ripple-dougie@highmoor.co.uk
Received: from mail.plus.net [212.159.10.1]
	by localhost with POP3 (fetchmail-6.2.5)
	for postie@localhost (single-drop); Mon, 16 Aug 2004 07:59:20 +0100 (BST)
Received: (qmail 73310 invoked from network); 16 Aug 2004 06:53:06 -0000
Received: from unknown (HELO ptb-mxcore01.plus.net) (212.159.14.215)
  by ptb-mailstore03.plus.net with SMTP; 16 Aug 2004 06:53:06 -0000
Received: from mail3.firstlink.com ([66.37.141.15])
	by ptb-mxcore01.plus.net with esmtp (Exim 4.30; FreeBSD)
	id 1BwbMg-000GsR-0E
	for dougie@highmoor.co.uk; Mon, 16 Aug 2004 06:53:06 +0000
Received: by mail3.firstlink.com (Postfix, from userid 60001)
	id D0E7EE15AD; Mon, 16 Aug 2004 00:52:59 -0600 (MDT)
From: spamassassin-users@incubator.apache.org
Content-Type: text/plain;
  charset=iso-8859-1
Comment: Autoresponder, First Link Technology;
To: dougie@highmoor.co.uk
Subject: Re: SA Users whitelisting/Bayes question
Message-Id: <20...@mail3.firstlink.com>
Date: Mon, 16 Aug 2004 00:52:59 -0600 (MDT)
Content-Transfer-Encoding: quoted-printable
X-Holme-Dene-MailScanner: Found to be clean, Found to be clean
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on nick.homelan
X-Spam-Level: 
X-Spam-Status: No, hits=0.2 required=5.0 tests=BAYES_44,NO_REAL_NAME 
	autolearn=no version=2.63
X-MailScanner-From: postie@highmoor.co.uk
Status: R
X-Status: N
X-KMail-EncryptionState:  
X-KMail-SignatureState:  
X-KMail-MDN-Sent:  

Re: Empty replies

Posted by William Stearns <ws...@pobox.com>.
Good afternoon, Chris,

On Mon, 16 Aug 2004, Chris Santerre wrote:

> Has anyone been getting empty replies from other lists members?  Check the
> headers for spoofs. Something seems amist! Or it could be my paranoid side.

	Sorry, I couldn't resist.  ;-)
	I don't believe I have been getting empty replies, no.
	Cheers,
	- Bill

---------------------------------------------------------------------------
	"Linux is is like a wigwam - no windows, no gates, apache
inside!"
--------------------------------------------------------------------------
William Stearns (wstearns@pobox.com).  Mason, Buildkernel, freedups, p0f,
rsync-backup, ssh-keyinstall, dns-check, more at:   http://www.stearns.org
--------------------------------------------------------------------------