[SpamCop.net - protecting the internet through technology]

[SC-Help] Re: Emails SpamCop can't parse

Phil Calvert pcalvert at r0cketmail.c0m
Fri Feb 18 20:59:36 EST 2005


Hi Mike,

What's interesting is that I just ran the original email through SpamCop and
it parsed it successfully this time.  So something has changed.  Apparently
someone was able to figure out what was tripping up SpamCop, fortunately.

I just noticed something kind of strange, though.  The reporting addresses
for the links keep changing.  The reporting addresses I am getting are
different than the ones you posted.

When I ran the original email through SpamCop just now, here are the
reporting addresses I got for the links that were found:

Re: http://www.aurilavepoppetleggumdigging.com/emms... (Administrator of
network hosting website referenced in spam)
To: abuse at cnc-noc.net (Notes)
To: postmaster#cnc-noc.net at devnull.spamcop.net (Notes)

Re: http://www.zoo345.com/192879/rpm/lifetime.html (Administrator of network
hosting website referenced in spam)
To: postmaster#chinanet.cn.net at devnull.spamcop.net (Notes)
To: anti-spam at chinanet.cn.net (Notes)
To: renbin at mail.he.cn (Notes)
To: ct-abuse at abuse.sprint.net (Notes)


Then I opened the tracking link in a new browser window to see what I would
see, and noticed that the reporting addresses for the second link were
different:

Re: http://www.zoo345.com/192879/rpm/lifetime.html (Administrator of network
hosting website referenced in spam)
To: cfc_dcy at sina.com (Notes)


After a few minutes, I again opened the tracking link in a new browser
window, and the reporting addresses were again different:

Re: http://www.aurilavepoppetleggumdigging.com/emms... (Administrator of
network hosting website referenced in spam)
To: cfc_dcy at sina.com (Notes)

Re: http://www.zoo345.com/192879/rpm/lifetime.html (Administrator of network
hosting website referenced in spam)
To: abuse at cnc-noc.net (Notes)
To: postmaster#cnc-noc.net at devnull.spamcop.net (Notes)

I wonder what's going on.  It seems a bit odd that the reporting addresses
would change from one minute to the next.

Phil


"Mike Easter" <MikeE at ster.invalid> wrote in message
news:cv5hip$51l$1 at news.spamcop.net...
> Posted to .help & .spam, f/ups to .help.
>
> Discussions in spamcop.help or spamcop -- no discussions in
> spamcop.spam.
>
> Phil Calvert wrote:
> > I've seen a number of emails recently that SpamCop fails to parse.
> > The links are there, but SpamCop reports "no links found."  Here is
> > an example of one such email:
>
> Pasting something in .spam to discuss how SC parses it causes a number
> of problems which are caused by your newsreader's posting of the spam
> into the message body to introduce linewraps which interfere with the
> ability of the parser to parse the item, so spam posting in spamcop.spam
> is a very very poor substitute for posting the tracker of the item which
> you originally submitted to the parser.  That tracker way we can see the
> same parse result which you saw.  See my tracker below.
>
> When I 'work with' the item you 'bent' by posting it into .spam, I have
> to remove improper linewraps.  If improper linewraps were present in the
> original and that was what caused the problem, those improper linewraps
> get removed by me just like the 'improper' line wraps which you
> introduced when you posted it into .spam.
>
> Bottom line:  if you want to talk about how spamcop parsed a spam, don't
> post it in .spam the way we used to.  Instead, feed it to the parser and
> copy the tracking url and paste that into any group you like,
> spamcop.help or spamcop.  There is no longer any need for the usage of
> spamcop.spam now that the tracker contains all of the original spam item
> in addition to the parsing tracker.
>
> Here is the tracker for your spam indicating that what I repaired from
> your post and submitted to the parser was able to show the links.
>
> www.spamcop.net/sc?id=z733979065z4eb151f727c5224c9d4efd081856f618z
> Report Spam to:
> Re: 211.58.111.157 (Administrator of network where email originates)
>    To: nospam#hanaro.com at devnull.spamcop.net (Notes)
>    To: abuse at hanaro.com (Notes)
> Re: http://www.aurilavepoppetleggumdigging.com/emms... (Administrator of
> network hosting website referenced in spam)
>    To: postmaster#chinanet.cn.net at devnull.spamcop.net (Notes)
>    To: anti-spam at chinanet.cn.net (Notes)
>    To: ct-abuse at abuse.sprint.net (Notes)
> Re: http://www.zoo345.com/192879/rpm/lifetime.html (Administrator of
> network hosting website referenced in spam)
>    To: postmaster at chinatietong.com (Notes)
>    To: crnet_mgr at chinatietong.com (Notes)
>    To: crnet_tec at chinatietong.com (Notes)
>
>
>
> --
> Mike Easter
> kibitzer, not SC admin
>




More information about the SpamCop-Help mailing list