🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.sys.acorn.apps
Article #210

Re: Spam site -was: Hotmail

#210
From: Mike Williams
Date: Thu, 25 Jun 1998 00:00
45 lines
2564 bytes
I demand that Stuart Painting may, or may not, have written:

> In article <485B54630E%polaris@ursaminr.demon.com.uk>, Peter Smith
> <URL:mailto:polaris@ursaminr.demon.com.uk> wrote:
> > 
> > I've done that, but it's been done so it _appears_ to come from me, at least
> > as far as Junkmail is concerned, it _is_ from me. It's got me in the Return
> > Path, From and message IDs.
> > 
> > Here is the header.....
> > 
> > > Return-Path: <Giffy@ursaminr.demon.co.uk>
> > > Received: from saven.se (hal.saven.se [192.165.84.254])
> > > 	  by rly-zc04.mx.aol.com (8.8.5/8.8.5/AOL-4.0.0)
> > > 	  with ESMTP id MAA16649;
> > > 	  Fri, 19 Jun 1998 12:02:09 -0400 (EDT)
> > > From: Giffy@ursaminr.demon.co.uk
> > > Received: from Mailhub by saven.se id SAA15610; Fri, 19 Jun 1998 18:06:46 
> > > +0200 (DFT)
> 
> Hold on... are you saying that !JunkMail identified *you* as the
> real sending site? Are you sure it didn't mention "saven.se"
> (which from those headers looks mighty suspicious...)
> 
> I am assuming that the *recipient* was an AOL customer.
> 
> stuart
> 

Because "saven.se" isn't in the database of !Junkmail v1 (I've never heard
of them) it would only complain to "postmaster@saven.se" if it can't find
any complaint addresses that *are* in its database.
Abuse@demon.net is in the database, so it only complains there.


As it happens, !Junkmail2 (which is almost ready to start beta testing),
handles this a lot better, choosing to complain to "postmaster@saven.se"
with confidence score 200, and offering "abuse@demon.net" as an alternative
with confidence score 25, which is below the default confidence threshold of
60.


-- 
Mike Williams
Technical Details
Message-ID: <19980625.035128.53@econym.demon.co.uk>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <3ae7bd5a48%tim@worthy.demon.co.uk> <ant2414297a1t$G3@jim.ukonline.co.uk> <485B54630E%polaris@ursaminr.demon.com.uk> <ant242152b49MRUA@zedtoo.demon.co.uk>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 114044,54d3695880ab62a9
X-Google-Attributes: gid114044,public
X-Google-Thread: 113320,3ff2a9fd2af5fc7b
X-Google-Attributes: gid113320,public
From: Mike Williams
Subject: Re: Spam site -was: Hotmail
Date: 1998/06/25
Message-ID: <19980625.035128.53@econym.demon.co.uk>
X-Deja-AN: 366134063
References: <3ae7bd5a48%tim@worthy.demon.co.uk> <ant2414297a1t$G3@jim.ukonline.co.uk> <485B54630E%polaris@ursaminr.demon.com.uk> <ant242152b49MRUA@zedtoo.demon.co.uk>
Reply-To: mike@econym.demon.co.uk
Distribution: world
X-NNTP-Posting-Host: econym.demon.co.uk:158.152.151.180
X-Complaints-To: abuse@demon.net
X-Trace: news.demon.co.uk 898817504 nnrp-04:12653 NO-IDENT econym.demon.co.uk:158.152.151.180
Organization: Beard Technology
Newsgroups: comp.sys.acorn.apps,demon.ip.support.archimedes