[Scspamcop] Re: Is SpamCop parsing this correctly?

David Bolt blacklist-me at davjam.org
Tue Apr 14 20:52:54 EDT 2009


On Wed, 15 Apr 2009, Geoffrey Hyde wrote:-

>http://www.spamcop.net/sc?id=z2792181368zbcb1e3b85cc8fcb010d48b35cfdd5f4fz
>
>It's obviously a pathetic attempt at a forgery trying to be from some
>legitimate looking Microsoft company or subsidiary.  SpamCop wasn't fooled,
>either.

I'm not at all surprised. It's a "Canadian Pharmacy" spam. Up until
around November or December, I received these very regularly, probably
going back to the beginning of last year. As to why they stopped, I have
no idea.

>
>Is SpamCop parsing this spam correctly?

What makes you think it isn't? There's no received-header forgery,
although Bigpond still has it's screwed up headers, and they do chain
properly.

>Being that I'm mailhosted, I need
>to find out if SpamCop's getting the right target, so just let me know if
>the parser is doing what it's supposed to do and finding the source or not.
>I don't care about whatever gimmicks the spammer was trying to use.

Purely out of curiosity, if you don't trust SpamCop to parse the headers
correctly, which is supposed to be much easier for it to do when you're
mailhosted, why are you actually bothering to use SpamCop?

Oh, and to finally answer your question, you'll find that it did indeed
parse the headers and identify the source correctly.


Regards,
        David Bolt

-- 
Team Acorn: http://www.distributed.net/ OGR-NG @ ~100Mnodes RC5-72 @ ~1Mkeys/s
openSUSE 10.3 32b | openSUSE 11.0 32b |                   |
openSUSE 10.3 64b | openSUSE 11.0 64b | openSUSE 11.1 64b |
openSUSE 10.3 PPC | RISC OS 3.6       | RISC OS 3.11      | TOS 4.02


More information about the SCspamcop mailing list