lynx-dev
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: lynx-dev lynx: are you getting spam like this one?:


From: David Woolley
Subject: Re: lynx-dev lynx: are you getting spam like this one?:
Date: Sun, 5 Jul 1998 11:12:45 +0100 (BST)

And is there a way in unix mail (or other program) to
interactively show all that stuff that maybe SHOULD be
supressed normally?

Depends on the user agent.  For elm, you use the h command (although, if
the message has MIME headers you may need to pipe it through a pager, e.g.
|less

Also elm has a utility called readmsg, and readmsg -h, whilst replying,
will return the full headers.

Below are the full headers from your posting to the list (using readmsg
-h).  Unfortunately the list server has been configured to suppress
inbound Received headers, which makes it difficult or impossible to
trace spams which are actually sent to the list.  (Caution: the last
Received header from early versions of Stealth Mailer is always forged,
although this is not true of more recent spamming engines.)

Typical Stealth Mailer clues include bogus X-Pmflags (usually corrupt)
and X-UIDL headers, malformed message IDs, particular structures in the
faked Received line etc. and the use of an innocent (but badly managed)
third party mail relay to confuse the identity of the source.  These have
changed between versions and are user configurable, although the market
for these programs often is unable to configure them sensibly.

It is important when reporting spam that you never include less than this
level of detail in the headers, as the ones that are shown by default are
nearly always forged.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]