Hi guys, could you please try to verify whether the following potential bug in SA 2.40- cvs is still present in current versions?
I received the following e-mail message and noticed dozens of 'charset="US- ASCII"' headers in the *body* of the message. Upon further inspection I noticed that the corresponding *header* line has TWO occurences of the charset declaration, and there weren't ANY SA headers present (which is unusual since even non-spam messages are usually tagged by SA on my system with my setup.) My explanation is that SA somehow went mad and stopped processing of the message at one point. Different explanation: The spammer's software went mad?! Here's the message: ============================== 8x =============================== >Return-path: <[EMAIL PROTECTED]> >Envelope-to: [EMAIL PROTECTED] >Delivery-date: Sun, 29 Sep 2002 02:11:00 +0200 >Received: from hubA.mydomain.de ([aa.bb.cc.dd]:58046) > by myhost.mydomain.de with esmtp (Exim 4.10) > id 17vRac-0007Js-00 > for [EMAIL PROTECTED]; Sun, 29 Sep 2002 02:06:18 +0200 >Received: from hubA.mydomain.de (hubB.mydomain.de [aa.bb.cc.ee]) > by hubA.mydomain.de (8.12.1/8.11.3-2) with ESMTP id g8SKYa44006039 > for <[EMAIL PROTECTED]>; Sat, 28 Sep 2002 22:34:36 +0200 (MEST) >Received: from ms-2 (hubC.mydomain.de [aa.bb.cc.ee31]) > by hubA.mydomain.de (8.12.1/8.11.3/24) with ESMTP id g8SKYarn006036 > for <[EMAIL PROTECTED]>; Sat, 28 Sep 2002 22:34:36 +0200 (MEST) >Received: from hubD.mydomain.de > (hubD.mydomain.de [aa.bb.cc.ff]) by hubE.mydomain.de > (iPlanet Messaging Server 5.2 (built Feb 21 2002)) > with ESMTP id <[EMAIL PROTECTED]> for > [EMAIL PROTECTED] (ORCPT [EMAIL PROTECTED]); Sat, > 28 Sep 2002 22:34:36 +0200 (MEST) >Received: from hubD.mydomain.de (hubF.mydomain.de [aa.bb.dd.ff]) > by hubD.mydomain.de (8.12.1/8.11.3-3) with ESMTP id g8SKYYdC010088 > for <[EMAIL PROTECTED]>; Sat, 28 Sep 2002 22:34:34 +0200 (MEST) >Received: from vger.kernel.org (vger.kernel.org [209.116.70.75]) > by hubD.mydomain.de (8.12.1/8.11.3/24) with ESMTP id g8SKYUjI010064 > for <[EMAIL PROTECTED]>; Sat, 28 Sep 2002 22:34:32 +0200 (MEST) >Received: ([EMAIL PROTECTED]) by vger.kernel.org via listexpand id > <S262323AbSI1U0A>; Sat, 28 Sep 2002 16:26:00 -0400 >Received: ([EMAIL PROTECTED]) by vger.kernel.org id <S262324AbSI1U0A>; > Sat, 28 Sep 2002 16:26:00 -0400 >Received: from h005018136633.ne.client2.attbi.com > ([24.60.20.142]:11006 "EHLO Notebook") by vger.kernel.org with ESMTP id > <S262323AbSI1UZn>; Sat, 28 Sep 2002 16:25:43 -0400 >Date: Sat, 28 Sep 2002 16:25:43 -0400 >From: [EMAIL PROTECTED] >Subject: $3.50 to join Before Launch!!!!!!!!!!! Will Make $1,000's later!!!!!!! >Sender: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Message-id: <[EMAIL PROTECTED]> >MIME-version: 1.0 >Content-type: text/plain; charset=US-ASCII; charset=US-ASCII >Content-transfer-encoding: 7BIT >Precedence: bulk >X-Mailing-List: [EMAIL PROTECTED] >Status: > > charset="US-ASCII"; > charset="US-ASCII"; > charset="US-ASCII"; > > charset="US-ASCII"; > charset="US-ASCII"; > charset="US-ASCII"; > > charset="US-ASCII"; > charset="US-ASCII"; > charset="US-ASCII"; > > charset="US-ASCII"; > charset="US-ASCII"; > charset="US-ASCII"; > [dozens of identical repetitions] > charset="US-ASCII"; > charset="US-ASCII"; > charset="US-ASCII"; > > charset="US-ASCII"; > charset="US-ASCII"; > charset="US-ASCII"; > > charset="US-ASCII"; > charset="US-ASCII"; > charset="US-ASCII" >Reply-To: [EMAIL PROTECTED] >Date: Sat, 28 Sep 2002 16:31:06 -0400 >X-Priority: 3 >X-Library: Indy 9.00.10 >X-Mailer: Foxmail > >Hello Friends!!!!!! > >Why will it only take 28 minutes a month for Guerrilla Marketing >Bombshells to increase your profits? > >http://www.gmktgb.com/page/soundp/ > >You'll have to click on the link to find out why the select few >who have seen the product plan are begging to get early access >to the product (sorry, no one can get access until the launch >date - click on the link below to find out when). > > >http://www.gmktgb.com/page/soundp/ > >But, here are the top 3 reasons why it's vital that you sign up >now during the pre-launch phase: > >1. Secure your position in the highest paying 2x15 forced matrix >in the industry. A full matrix pays (click below for answer) per >month. > >2. This is a unique high-demand product that will be physically >impossible for anyone to duplicate. Brought to you by two names >that are legends in the industry (click below to find out who). > >3. You'll be given an opportunity to promote GMB before the >launch and pre-build your matrix. Pre-launch and launch dates >are: (click below for answer). > >http://www.gmktgb.com/page/soundp/ > >The product will be in high demand by anyone who wants to >generate more profit from their business. In fact, it will only >take 28 minutes a month. (That's less than a minute a day.) > >Sign up here now: > >http://www.gmktgb.com/page/soundp/ > >All the best, > >Mark > >Mark Joyner >CEO, Aesop.com >- >To unsubscribe from this list: send the line "unsubscribe linux-net" in >the body of a message to [EMAIL PROTECTED] >More majordomo info at http://vger.kernel.org/majordomo-info.html > ============================== 8x =============================== Any ideas?! Thanks, Ralf -- L I N U X .~. The Choice /V\ of a GNU /( )\ Generation ^^-^^ ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
