Re: [vps-mail] update

[Godwin Stewart <gstewart@xxxxxxxxxxx>]

[ Reposting because I sent from the wrong address... (8(|) My bad. ]

And Thus Spake Scott Wiersdorf <scott@xxxxxxxxxxxx> (on Tue, 7 Oct 2003
16:14:53 -0600):

> I made a mistake by allowing non-list posts. I think I admitted that
> fairly frankly, but will do so again. The point of my original plea was to
> stop autosubmitting if it's going on.

Scott,

Autosubmitting to SpamCop and non-list member posts will be fine as long as
tracing information is not stripped from the e-mail going through
deep.iserver.net. As things are now, looking at the latest messages from
you, me, Abigail and SikaSpam, this tracing information *is* stripped,
making it look like deep.iserver.net *is* the source of the mail. For
example, here are the relevent headers I got back in my latest message:

Received: from mailgate.cesmail.net (mailgate.cesmail.net [216.154.195.36])
	by mail.bonivet.net (8.12.10/8.12.10) with SMTP id h97JDMBo011847
	for <gstewart@xxxxxxxxxxx>; Tue, 7 Oct 2003 21:13:23 +0200
Received: (qmail 4502 invoked from network); 7 Oct 2003 19:13:16 -0000
Received: from unknown (HELO blade1.cesmail.net) (192.168.1.211)
  by mailgate.cesmail.net with SMTP; 7 Oct 2003 19:13:16 -0000
Received: (qmail 20919 invoked by uid 1010); 7 Oct 2003 19:13:16 -0000
Delivered-To: spamcop-net-gstewart@xxxxxxxxxxx
Received: (qmail 20895 invoked from network); 7 Oct 2003 19:13:16 -0000
Received: from unknown (HELO mailgate.cesmail.net) (192.168.1.101)
  by blade1.cesmail.net with SMTP; 7 Oct 2003 19:13:16 -0000
Received: (qmail 4449 invoked from network); 7 Oct 2003 19:13:15 -0000
Received: from deep.iserver.net (161.58.168.219)
  by mailgate.cesmail.net with SMTP; 7 Oct 2003 19:13:15 -0000
Received: (from deep@localhost)
	by deep.iserver.net (8.12.9p1/8.11.2) id h97J8jXf019445;
	Tue, 7 Oct 2003 13:08:45 -0600 (MDT)

As far as I'm concerned looking at these headers, and as far as any parsing
system is concerned, this mail originated on deep.iserver.net because there
are no headers describing the route taken by the message when I posted it to
this group. Therefore, if I were to report it as spam, deep.iserver.net is
the host which is going to get listed as the source of spam and blocked by
MTA's using the SpamCop DNSBL.

Leave this information in, and in the event of a piece of spam being
reported, the blame will no longer be laid on you but on the real point of
injection of the spam: i.e. the real sender or the compromised open proxy in
Brazil or China.

-- 
G. Stewart   --   gstewart@xxxxxxxxxxx -- gstewart@xxxxxxxxxxx
Registered Linux user #284683 (Slackware 9.0)
---------------------------------------------------------------
Sign spotted in a Laundromat:
AUTOMATIC WASHING MACHINES: PLEASE REMOVE ALL YOUR
CLOTHES WHEN THE LIGHT GOES OUT
======================================================================
Technical questions regarding this list may be sent to
<vps-mail-owner@xxxxxxxxxxxx>. You may request an automated help
response by sending an email with the word 'help' (w/o quotes) in the
BODY of the message (subject is ignored) to <vps-mail-request@xxxxxxxxxxxx>.
======================================================================