A weird thing has started within the last couple of days. It is only
affecting mail received from the SA users mail list and only to mail
received from Paul Douglas Franklin of Yakima UGM <[EMAIL PROTECTED]>
The messages have a "To" header like this:
To: [EMAIL PROTECTED], "Users <users"@<81>!Can.gregorie.org,
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED]
I've edited it slightly:
- I line wrapped it
- the group "<81>" replaces a character with the hex value of 0x81.
I had to change it because in its original form it was corrupting
the header when I pasted it into this message.
I think its not anything malicious and that its bitten mail sent by Mr.
Franklin because of something unique in the headers when his response
reached the SA listserver. I think it may have something to do with the
SA mailing list software. Reasons:
- In the past I've noticed that mail I've sent has appeared on the
mailing list minus the first line of the body. When I looked at
what I sent the first line was present and correct
- If I pick off the mailbox part of all addresses after the 0x81
byte I get:
"Can you point me to a good regex tutorial? The one I have
found has",
which is the first line of Mr. Franklin's message. In the
message I received the body of this message starts from his
second line:
"given me a lot of good starting stuff, but it doesn't mention
the ?:,"
Has anybody else seen this problem?
I'd really like this to be fixed as its littering my mail archiving
system with junk addresses. I've attached the complete, unmodified
message as "annoyance'txt".
Martin
>From [EMAIL PROTECTED] Fri Feb 8 19:09:33 2008
Return-Path:
<[EMAIL PROTECTED]>
X-Original-To: kiwi
Delivered-To: [EMAIL PROTECTED]
Received: by zoogz.gregorie.org (Postfix, from userid 512) id 2D2B56D824;
Fri, 8 Feb 2008 19:09:33 +0000 (GMT)
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on
zoogz.gregorie.org
X-Spam-Level: *
X-Spam-Status: No, score=1.5 required=6.0
tests=BAYES_50,DNS_FROM_RFC_BOGUSMX autolearn=no version=3.2.3
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from pop3.ukfsn.org [77.75.108.10] by zoogz.gregorie.org with
POP3 (fetchmail-6.3.7) for <[EMAIL PROTECTED]> (single-drop); Fri, 08
Feb 2008
19:09:30 +0000 (GMT)
Received: from localhost (smtp-filter.ukfsn.org [192.168.54.205]) by
mail.ukfsn.org (Postfix) with ESMTP id D7622DEDAD for
<[EMAIL PROTECTED]>; Fri, 8 Feb 2008 19:05:31 +0000 (GMT)
X-Virus-Scanned: Checked for spam/virus with amavisd-new at UKFSN.ORG
Received: from mail.ukfsn.org ([192.168.54.25]) by localhost
(smtp-filter.ukfsn.org [192.168.54.205]) (amavisd-new, port 10024) with
ESMTP id 1BkOIEOKOnyF for <[EMAIL PROTECTED]>; Fri, 8 Feb 2008
19:03:48 +0000 (GMT)
Received: from smtp21-02.prod.mesa1.secureserver.net
(smtp21-02.prod.mesa1.secureserver.net [64.202.189.45]) by
mail.ukfsn.org
(Postfix) with ESMTP id C5ED6DEDBC for <[EMAIL PROTECTED]>; Fri, 8
Feb 2008 19:04:22 +0000 (GMT)
Received: (qmail 14872 invoked by uid 1000); 8 Feb 2008 19:04:06 -0000
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 14868 invoked from network); 8 Feb 2008 19:04:06 -0000
Received: from unknown (HELO p3presmtp01-13.prod.phx3.secureserver.net)
([208.109.80.162]) (envelope-sender
<[EMAIL PROTECTED]>) by
smtp21-02.prod.mesa1.secureserver.net (qmail-1.03) with SMTP for
<[EMAIL PROTECTED]>; 8 Feb 2008 19:04:06 -0000
Received: (qmail 2446 invoked from network); 8 Feb 2008 19:04:06 -0000
Received: from hermes.apache.org (HELO mail.apache.org) ([140.211.11.2])
(envelope-sender
<[EMAIL PROTECTED]>) by
p3presmtp01-13.prod.phx3.secureserver.net (qmail-ldap-1.03) with SMTP
for
<[EMAIL PROTECTED]>; 8 Feb 2008 19:04:05 -0000
Received: (qmail 15885 invoked by uid 500); 8 Feb 2008 19:03:55 -0000
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
list-help: <mailto:[EMAIL PROTECTED]>
list-unsubscribe: <mailto:[EMAIL PROTECTED]>
List-Post: <mailto:users@spamassassin.apache.org>
List-Id: <users.spamassassin.apache.org>
Delivered-To: mailing list users@spamassassin.apache.org
Received: (qmail 15876 invoked by uid 99); 8 Feb 2008 19:03:54 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 08 Feb 2008 11:03:54 -0800
X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS
Received-SPF: pass (athena.apache.org: local policy)
Received: from [68.116.30.118] (HELO exchange.yugm.org) (68.116.30.118) by
apache.org (qpsmtpd/0.29) with ESMTP; Fri, 08 Feb 2008 19:03:25 +0000
Received: from localhost (localhost [127.0.0.1]) by exchange.yugm.org
(Postfix) with ESMTP id 487B5384001 for <users@spamassassin.apache.org>;
Fri, 8 Feb 2008 11:25:55 -0800 (PST)
Received: from exchange.yugm.org ([127.0.0.1]) by localhost
(exchange.yugm.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id
04808-01 for <users@spamassassin.apache.org>; Fri, 8 Feb 2008 11:25:55
-0800 (PST)
Received: from localhost (localhost [127.0.0.1]) by exchange.yugm.org
(Postfix) with ESMTP id E21EB384002 for <users@spamassassin.apache.org>;
Fri, 8 Feb 2008 11:25:54 -0800 (PST)
Received: from [192.168.1.129] (unknown [192.168.1.129]) by
exchange.yugm.org (Postfix) with ESMTP id CE7CC384001 for
<users@spamassassin.apache.org>; Fri, 8 Feb 2008 11:25:54 -0800 (PST)
Message-ID: <[EMAIL PROTECTED]>
Date: Fri, 08 Feb 2008 11:03:26 -0800
From: Paul Douglas Franklin of Yakima UGM <[EMAIL PROTECTED]>
User-Agent: Thunderbird 2.0.0.9 (Windows/20071031)
MIME-Version: 1.0
To: [EMAIL PROTECTED], "Users <users"@�!Can.gregorie.org, [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED]
X-Evolution-Source: pop://[EMAIL PROTECTED]/
Subject: No Subject
Content-Transfer-Encoding: 8bit
given me a lot of good starting stuff, but it doesn't mention the ?:,
and I'd like to learn more.
--Thanks.
Matt Kettler wrote:
> The regex for the rule is:
> /\bfree (?:porn|xxx|adult)/i
--
Paul Douglas Franklin
Computer Manager, Union Gospel Mission of Yakima, Washington
Husband of Danette
Father of Laurene, Miriam, Tycko, Timothy, Sarabeth, Marie, Dawnita, Anna Leah,
Alexander, and Caleb
