> -----Original Message-----
> From: jdow [mailto:[EMAIL PROTECTED]
> Sent: Monday, July 31, 2006 7:16 PM
> To: John D. Hardin
> Cc: users@spamassassin.apache.org
> Subject: Re: postini.com
> > Sample headers?
I am sure you know that the only headers you can 100% truse are the last
set (earthlink)
I am assuming that earthlink received it from ossie.acm.org, but that
cannot be confirmed.
Also, cannot be confirmed that postini actually sent it to
ozzie.acm.org.
(unless you ask postini, who doesn't have a working abuse@ address, or
postmaster@, and their whois contacts is invalid also..
Approved-By: [EMAIL PROTECTED]
> Received: from psmtp.com (exprod7mx59.postini.com) by
> ozzie.acm.org (LSMTP for
> Windows NT v1.1b) with SMTP id
> <[EMAIL PROTECTED]>; Mon, 31
> Jul 2006 5:52:36 -0400
> Received: from source ([63.118.7.109]) (
63.118.7.109 doesn't look like a postini email address.
>
> ===8<---
> Status: OU
> Return-Path: <[EMAIL PROTECTED]>
> Received: from smtp.earthlink.net [209.86.93.203]
> by localhost with POP3 (fetchmail-6.2.5.5)
> for [EMAIL PROTECTED] (single-drop); Mon, 31 Jul
> 2006 15:36:59 -0700 (PDT)
> Received: from ozzie.acm.org ([199.222.69.4])
> by mx-pinchot.atl.sa.earthlink.net (EarthLink SMTP Server)
> with SMTP id 1g7Gnj6fA3Nl34d0;
> Mon, 31 Jul 2006 18:36:37 -0400 (EDT)
> Received: from ozzie (ozzie.acm.org) by ozzie.acm.org (LSMTP
> for Windows NT v1.1b) with
> SMTP id <[EMAIL PROTECTED]>; Mon, 31 Jul 2006 16:46:34 -0400
> Received: by LISTSERV.ACM.ORG (LISTSERV-TCP/IP release 14.3)
> with spool id
> 12697299 for [EMAIL PROTECTED];
> Mon, 31 Jul 2006
> 16:45:17 -0400
> Approved-By: [EMAIL PROTECTED]
> Received: from psmtp.com (exprod7mx59.postini.com) by
> ozzie.acm.org (LSMTP for
> Windows NT v1.1b) with SMTP id
> <[EMAIL PROTECTED]>; Mon, 31
> Jul 2006 5:52:36 -0400
> Received: from source ([63.118.7.109]) (using SSLv3) by
> exprod7mx59.postini.com
> ([64.18.6.14]) with SMTP; Mon, 31 Jul 2006 05:51:21 EDT
> Received: from psmtp.com ([64.18.2.79]) by acm26-4.acm.org (ACM Email
> Forwarding Service) with SMTP id JQE60921 for
> <[EMAIL PROTECTED]>; Mon, 31 Jul 2006 05:51:21 -0400
> Received: from source ([66.18.208.253]) by exprod7mx77.postini.com
> ([64.18.6.13]) with SMTP; Mon, 31 Jul 2006 02:51:18 PDT
> MIME-Version: 1.0
> Content-Type: multipart/related;
> boundary="----=_NextPart_000_0003_01C6B454.98D38790"
> X-Mailer: Microsoft Office Outlook, Build 11.0.5510
> Thread-Index: Aca0VJjVW9FxV5MfQTaS8xX06pxKOg==
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
> X-pstn-levels: (S: 0.05089/99.00590 R:95.9108 P:95.9108
> M:96.8350 C:98.6951
> )
> X-pstn-settings: 5 (2.0000:2.0000) s gt3 gt2 gt1 r p m c
> X-pstn-addresses: from <[EMAIL PROTECTED]> [db-null]
> Message-ID: <[EMAIL PROTECTED]>
> Date: Mon, 31 Jul 2006 03:51:26 +0600
> Reply-To: "senses." <[EMAIL PROTECTED]>
> Sender: ACM PDC Announcement List <[EMAIL PROTECTED]>
> From: "senses." <[EMAIL PROTECTED]>
> Subject: [ACM-PDC] previous year.
> Comments: To: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> Precedence: list
> X-ELNK-Info: spv=0;
> X-ELNK-AV: 0
> X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
> X-Spam-Virus: No
> X-Spam-Checker-Version: SpamAssassin 3.0.5 (2005-06-05) on
> morticia.wizardess.wiz
> X-Spam-Level: ****
> X-Spam-Status: No, score=4.5 required=5.0
> tests=BAYES_95,HTML_80_90,
> HTML_IMAGE_RATIO_06,HTML_MESSAGE,JD_HI_BAYES,JD_VHI_BAYES,
> RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB autolearn=disabled
> version=3.0.5
> X-Jdow: user jdow
> X-IMAPbase: 1142818988 95886
> X-UID: 95886
> Content-Length: 27395
> X-Keywords:
>
> ===8<---
> Note the VERY long empty "Keywords:". That might make a good
> emergency filter?
> ===8<---
> Status: OU
> Return-Path: <[EMAIL PROTECTED]>
> Received: from smtp.earthlink.net [209.86.93.203]
> by localhost with POP3 (fetchmail-6.2.5.5)
> for [EMAIL PROTECTED] (single-drop); Mon, 31 Jul
> 2006 07:12:36 -0700 (PDT)
> Received: from 20179087035.user.veloxzone.com.br
> ([201.79.87.35]) by mx-clapper.atl.sa.earthlink.net
> (EarthLink SMTP Server) with ESMTP id 1g7ytV1HW3Nl34b0 for
> <[EMAIL PROTECTED]>; Mon, 31 Jul 2006 10:11:02 -0400 (EDT)
> From: "billed" <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: iBook
> Date: Mon, 31 Jul 2006 11:10:49 +0300
> MIME-Version: 1.0
> Content-Type: multipart/related;
> boundary="----=_NextPart_000_0005_01C6B491.FAE3AB80"
> X-Mailer: Microsoft Office Outlook, Build 11.0.5510
> Thread-Index: Aca0kfrjTM2IyGkASIC2ZFVp12qh8A==
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
> Message-Id: <[EMAIL PROTECTED]>
> X-ELNK-AV: 0
> X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
> X-Spam-Virus: No
> X-Spam-Checker-Version: SpamAssassin 3.0.5 (2005-06-05) on
> morticia.wizardess.wiz
> X-Spam-Level: ****
> X-Spam-Status: No, score=4.5 required=5.0
> tests=BAYES_80,HELO_EQ_BR,
> HOST_EQ_BR,HTML_IMAGE_RATIO_06,HTML_MESSAGE,JD_HI_BAYES,JD_MY_IDS,
> JD_MY_NAME,JD_TO_EARTHLINK autolearn=disabled version=3.0.5
> X-Jdow: user jdow
> X-UID: 95455
> Content-Length: 27569
> X-Keywords:
>
> ===8<---
> Yes - lots of blanks after broken X-<nl>keywords.
> {^_^}
>
>
