At Thu Oct 17 23:54:05 2002, Justin Mason wrote:
> Martin Radford said:
>
> > These are Message-IDs generated by my ISP's incoming mail server for
> > mails that don't already have a message id. And that would explain
> > why no one else is seeing these, while I've got a fair number.
> >
> > I'll keep that as a local rule, since I've never come across a legit
> > mail client that doesn't include a message-id.
>
> aha. Yep, we have a rule for this when sendmail does it. (what
> MTA does your ISP use?)
I'm pretty sure it's their own custom MTA. The SMTP connection banner
is:
220 punt-11.mail.demon.net Server SMTP (Complaints/bugs to: [EMAIL PROTECTED])
The headers of a test message from my work account (hostnames munged):
Received: from finch-punt-12.mail.demon.net (finch-punt-12.mail.demon.net
[194.217.242.36])
by zamenhof.demon.co.uk (8.9.3/8.9.3) with SMTP id AAA02540
for <[EMAIL PROTECTED]>; Fri, 18 Oct 2002 00:08:26 +0100
From: [EMAIL PROTECTED]
Received: from punt-1.mail.demon.net by mailstore
for [EMAIL PROTECTED] id 1034896029:10:00265:59;
Thu, 17 Oct 2002 23:07:09 GMT
Received: from yyyy.xxxxxxxx.ac.uk ([ZZZ.ZZZ.ZZZ.110]) by punt-1.mail.demon.net
id aa1028692; 17 Oct 2002 23:06 GMT
Date: 18 Oct 2002 00:07:00 +0100
Message-ID: <[EMAIL PROTECTED]>
This doesn't trip the SA rules, presumably because Demon put the
message-id in the "wrong" place (i.e. not between the "received"
headers).
> worth noting that it's not always FP-free, as some legit newsletters
> and mailouts do this too. lame, but true.
One of my hits is from an opt-in newsletter.
Martin
--
Martin Radford | "Only wimps use tape backup: _real_
[EMAIL PROTECTED] | men just upload their important stuff -o)
Registered Linux user #9257 | on ftp and let the rest of the world /\\
- see http://counter.li.org | mirror it ;)" - Linus Torvalds _\_V
-------------------------------------------------------
This sf.net email is sponsored by: viaVerio will pay you up to
$1,000 for every account that you consolidate with us.
http://ad.doubleclick.net/clk;4749864;7604308;v?
http://www.viaverio.com/consolidator/osdn.cfm
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
