[SC-Help] Re: What is this?

[Mike Easter]

Steve Milano wrote:
> Sorry if I'm in the wrong forum.

.mail is for newsgroup discussing problems with the spamcop mail
service.   I'll crosspost this to .help and set f/ups there.

> I keep getting this e-mail over and over.
>
> There's no return or from address.

Return/from addresses on spams and virms are almost always bogus anyway.
Disregard them;  that is information useful only for normal mail.

> SpamCop says there's no body provided, so I can't report it.
>
> Any ideas?

That item is apparently an empty spam sourced from 68.117.145.90  rDNS
ip-wv-68-117-145-090.charterwv.net  notify  abuse at charter.net  which is
multilisted in spamcop and other spamsource db/s and also in
trojan/proxy db/s.

> Received: from ip-wv-68-117-145-090.charterwv.net ([68.117.145.90])

SC is configured to not 'allow' reporting of empty spams because many
times when people submit such an item it is felt to be an error in
submission method.

There is some controversy over whether or not it is permissible to add
some words to the empty body after a blank line below the headers such
as 'no body text' to enable the report on empty spam.

The faq doesn't permit that action;  no deputy has approved something
different from the faq's permission;  but it is common practice for some
people to advise making such an entry in the body, while others don't do
that since it isn't expressly permitted.

That item is also missing a number of other header elements, such as To,
Subject, MessageID.  Previously such a deficient item would fail to be
parsed for insufficient header elements;  apparently that part of the
algorithm has changed.  It will now process a spam if there is only just
a Received line and offer to send a report as long as there is something
in the body.

-- 
Mike Easter
kibitzer, not SC admin