From spam at bde-arc.ampr.org  Mon May 11 02:55:20 2009
From: spam at bde-arc.ampr.org (D. Stussy)
Date: Mon May 11 03:00:08 2009
Subject: [Scmail] Re: Messages sent using SC webmail <snip>
References: <Xns9AB137DB94E29newsaddresshypercrea@216.154.195.61>
	<g20s87$918$1@news.spamcop.net>
Message-ID: <gu8i4p$ijo$1@aux.snarked.org>

"Mike Easter" <MikeE@ster.invalid> wrote in message
news:g20s87$918$1@news.spamcop.net...
> Disclaimer:  I don't use spamcop mail;  I'm just commenting on the issues
> you've raised.
>
> D. T. wrote:
>
> <SA SpamAssassin has a rule which gives points for extra @ in MID>
> <SC creates MID with 2 @>
>
> > http://wiki.apache.org/spamassassin/Rules/MSGID_MULTIPLE_AT
>
> That link sez SA has an optional rule for scoring against multiple @ and
> gives a link where the MID is defined
> http://www.apps.ietf.org/rfc/rfc2822.html#sec-3.6.4
>
> As I'm reading 2822's 3.6.4 on MID at the link, I don't see any
> stipulation against multiple @, just some suggestions about how to make a
> unique MID which involves the @.

Did you read the BNF syntax carefully?

msg-id          =       [CFWS] "<" id-left "@" id-right ">" [CFWS]
id-left         =       dot-atom-text / no-fold-quote / obs-id-left
id-right        =       dot-atom-text / no-fold-literal / obs-id-right
no-fold-quote   =       DQUOTE *(qtext / quoted-pair) DQUOTE
no-fold-literal =       "[" *(dtext / quoted-pair) "]"
dot-atom-text   =       1*atext *("." 1*atext)
atext           =       ALPHA / DIGIT / ; Any character except controls,
                        "!" / "#" /     ;  SP, and specials.
                        "$" / "%" /     ;  Used for atoms
                        "&" / "'" /  "*" / "+" / "-" / "/" / "=" / "?" /
                        "^" / "_" / "`" / "{" / "|" / "}" / "~"

So, with the first part, dot-atom-text, "@" is not included in "atext", so
it's impossible.  With "qtext" or "no-fold-quote", it's included, but that
entire part must be between double-quotes.  Therefore, if a second "@" does
appear, so must a pair of double quotes - and who quotes their message ID
components?  The third options, the obsolete local and domain parts, show
that only a quoted "@" may appear before an unquoted "@" (i.e. local-part
only) which separates the domain part.

> Conclusion1:  I don't believe there is a 2822 rule against multiple @ in
a
> MID, and everyone (who has control of it) should decide for themselves
> whether or not some particular or peculiar SA rule or another is any good
> for them or whether it should be discarded as a bad rule in their
> armamentarium.

Technically true, but if the MID doesn't begin OR end with a double-quote
inside "<" and ">", then the double-@ message-id will be an invalid string.

<xxx@yyy@zzz> is invalid
<"xxx@yyy"@zzz> is valid
<xxx@"yyy@zzz"> is historically invalid but valid with RFC-2822.

As I said above, who puts quotes in message-IDs?
-----
Aside:  Sendmail's M4 parsing as "<$+@$+>" will match the valid
combinations since the "@" won't match the "@" inside the quoted string.
A"$+" absorbs an entire quoted string as if it were atomic.  Note the
groupings by spaces:

<xxx@yyy@zzz> fails to match:  < xxx @ yyy @ zzz >

<"xxx@yyy"@zzz> matches: < "xxx@yyy" @ zzz >
     with $1 = "xxx@yyy" and $2 = zzz

<xxx@"yyy@zzz"> matches: < xxx @ "yyy@zzz" >
     with $1 = xxx and $2 = "yyy@zzz"

----- 
> Conclusion2:  Given conclusion1, I don't see any 'pressure' on JT to
> change how the SC mid is configured, but that's up to his interpretation
> of the 'existence' and implied 'guidance' of such a SA rule.  Perhaps he
> might simply decide to not use that rule.

If a construction is allowed but clearly non-standard (or non-conventional
due to lack of use), it may (and probably should) be scored.


From angelspspcreations at hotmail.com  Fri May 15 19:55:08 2009
From: angelspspcreations at hotmail.com (newangels)
Date: Fri May 15 20:00:03 2009
Subject: [Scmail] Not able to Log In
Message-ID: <gukvcs$gmj$1@news.spamcop.net>

Hi Everyone,

I have not been able to report Spam since yesterday via the web, tried 
everyting, deleting the cache in Firefox, plus cookies but its not letting 
me in, anyone else having this problem when they try to log in also?

Angela 


From MikeE at ster.invalid  Fri May 15 23:03:55 2009
From: MikeE at ster.invalid (Mike Easter)
Date: Fri May 15 23:05:03 2009
Subject: [Scmail] Re: Not able to Log In
References: <gukvcs$gmj$1@news.spamcop.net>
Message-ID: <gulaei$nfb$1@news.spamcop.net>

newangels wrote:

> I have not been able to report Spam since yesterday via the web, tried
> everyting, deleting the cache in Firefox, plus cookies but its not
> letting me in, anyone else having this problem when they try to log in
> also?

I can't tell from your description if you are having trouble logging in or
if you are having trouble submitting a spam.

If you are logged in, this page http://www.spamcop.net/  says Welcome and
your average reporting time

... else it sez that SpamCop is the premier service for reporting spam.

The login page is here http://www.spamcop.net/mcgi?action=loginform

... and the username is the complete reporting email address and the pass
is case sensitive.

I'm presuming you are a reporting only, free -- as opposed to reporting
paid member or mail account.

If your pass is being denied, then the page looks like this
http://www.spamcop.net/denied.shtml


-- 
Mike Easter
kibitzer, not SC admin

From angelspspcreations at hotmail.com  Sun May 17 00:51:39 2009
From: angelspspcreations at hotmail.com (newangels)
Date: Sun May 17 00:55:04 2009
Subject: [Scmail] Re: Not able to Log In
References: <gukvcs$gmj$1@news.spamcop.net> <gulaei$nfb$1@news.spamcop.net>
Message-ID: <guo556$e1j$1@news.spamcop.net>

Nope I am a paid member it was Firefox, it mangled all my passwords I am in 
and reporting now, thanks

Angela

"Mike Easter" <MikeE@ster.invalid> wrote in message 
news:gulaei$nfb$1@news.spamcop.net...
> newangels wrote:
>
>> I have not been able to report Spam since yesterday via the web, tried
>> everyting, deleting the cache in Firefox, plus cookies but its not
>> letting me in, anyone else having this problem when they try to log in
>> also?
>
> I can't tell from your description if you are having trouble logging in or
> if you are having trouble submitting a spam.
>
> If you are logged in, this page http://www.spamcop.net/  says Welcome and
> your average reporting time
>
> ... else it sez that SpamCop is the premier service for reporting spam.
>
> The login page is here http://www.spamcop.net/mcgi?action=loginform
>
> ... and the username is the complete reporting email address and the pass
> is case sensitive.
>
> I'm presuming you are a reporting only, free -- as opposed to reporting
> paid member or mail account.
>
> If your pass is being denied, then the page looks like this
> http://www.spamcop.net/denied.shtml
>
>
> -- 
> Mike Easter
> kibitzer, not SC admin
>