[SC-Help] Re: Spam "from" reserved netblocks

Fri Jul 8 23:12:48 EDT 2005

Geoff Lane wrote in news:Xns968DEF1692036gjctcswxnsrt at 216.154.195.61...
....
> Thanks for the info.
>
> Cracked it - I successfully submitted the config confirmation messages by
> saving as .eml files and sending as attachments. One down, seven to go :)

I've been reading along and also set up mailhosts earlier today, but SpamCop
wouldn't let me forward my account configuration emails as attachments.
Below is the full message source of the returned message, with a few things
[munged] for obvious reasons.

Instead I ended up copying and pasting each message source to the top window
on the http://www.spamcop.net/mcgi?action=mhreturn screen.  The questions
remain though:

1.  Why don't my .eml attachments go through?
2.  Do I really have to zip up my .eml files if I want to submit them that
way going forward?
3.  If so, is there a limit to the number of spamples in each zip file, or
to the total size of each zip file?

Geoff seems to be using Outlook Express like I am, since his email files end
with ".eml".  I'm running OE 6.00.2800.1123 under Win2K SP4.

FYI, when I first signed up with SpamCop on May 25th I got the same error
messages trying to submit my first few spamples as attachments.  Since then
I've been copying and pasting full message sources into new messages and
sending them to my personal reporting address.  That method, though, is
rather slow and I'd very much like to forward my submissions as attachments.

Also, even though it probably doesn't relate to this situation, earlier
today I switched from mole to regular reporting status.

Before posting here, I searched forum.spamcop.net for "recent viruses or
other malware", a string that appears in the autoreply message pasted in
below..  I reviewed topics 2188, 3696 and 4046 but they did not answer my
questions.  (No, the message does not contain a virus; it is plain text
directly from SpamCop.)  I also searched news.spamcop.net for the same
string but nothing came back.  The FAQ does not appear to address this
issue.  Also, there seems not to be any way to search the spamcop-help or
spamcop-list mail archives.

So, here I am!  Hopefully someone with sharper eyes can solve this mystery
... ?

Many thanks in advance,

Sean S.

=====

Return-path: <>
Envelope-to: [munge]@twin-dad.com
Delivery-date: Fri, 08 Jul 2005 16:38:13 -0500
Received: from [munge] by gator16.hostgator.com with local-bsmtp (Exim 4.50)
 id 1Dr0Y0-00039V-QG
 for [munge]@twin-dad.com; Fri, 08 Jul 2005 16:38:13 -0500
Received: from mailnull by gator16.hostgator.com with local (Exim 4.50)
 id 1Dr0Y0-0005GA-Nm
 for [munge]@twin-dad.com; Fri, 08 Jul 2005 16:38:12 -0500
X-Failed-Recipients: mhconf.[munge]@cmds.spamcop.net
Auto-Submitted: auto-generated
From: Mail Delivery System <Mailer-Daemon at gator16.hostgator.com>
To: [munge]@twin-dad.com
Subject: Mail delivery failed: returning message to sender
Message-Id: <E1Dr0Y0-0005GA-Nm at gator16.hostgator.com>
Date: Fri, 08 Jul 2005 16:38:12 -0500
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on
 gator16.hostgator.com
X-Spam-Level:
X-Spam-Status: No, score=-4.6 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00
 autolearn=ham version=3.0.4

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  mhconf.[munge]@cmds.spamcop.net
    This message has been rejected because it has
    a potentially executable attachment "SpamCop account configuration
email.eml"
    This form of attachment has been used by
    recent viruses or other malware.
    If you meant to send this file then please
    package it up as a zip file and resend it.

------ This is a copy of the message, including all the headers. ------

Return-path: <[munge]@twin-dad.com>
Received: from c-24-4-31-126.hsd1.ca.comcast.net ([24.4.31.126]:10735
helo=hq02)
 by gator16.hostgator.com with esmtpa (Exim 4.50)
 id 1Dr0Y0-0004rb-BW
 for mhconf.[munge]@cmds.spamcop.net; Fri, 08 Jul 2005 16:38:12 -0500
Message-ID: <240a01c58405$5b6f4950$9a0fa8c0 at hq02>
Reply-To: "Sean Sowell" <[munge]@twin-dad.com>
From: "Sean Sowell" <[munge]@twin-dad.com>
To: <mhconf.[munge]@cmds.spamcop.net>
Subject: [munge]@twin-dad test
Date: Fri, 8 Jul 2005 14:38:16 -0700
Organization: twin-dad.com
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="----=_NextPart_000_2407_01C583CA.AD5B6E50"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1506
Disposition-Notification-To: "Sean Sowell" <[munge]@twin-dad.com>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506

This is a multi-part message in MIME format.

------=_NextPart_000_2407_01C583CA.AD5B6E50
Content-Type: text/plain;
 charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

------=_NextPart_000_2407_01C583CA.AD5B6E50
Content-Type: message/rfc822;
 name="SpamCop account configuration email.eml"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
 filename="SpamCop account configuration email.eml"

Return-path: <service at admin.spamcop.net>
Envelope-to: [munge]@twin-dad.com
Delivery-date: Fri, 08 Jul 2005 16:35:57 -0500
Received: from [munge] by gator16.hostgator.com with local-bsmtp (Exim 4.50)
 id 1Dr0Vn-00014i-Ly
 for [munge]@twin-dad.com; Fri, 08 Jul 2005 16:35:56 -0500
Received: from sc-app2.spamcop.net ([64.74.133.243]:1750 helo=spamcop.net)
 by gator16.hostgator.com with smtp (Exim 4.50)
 id 1Dr0Vn-0006PN-Ao
 for [munge]@twin-dad.com; Fri, 08 Jul 2005 16:35:55 -0500
X-SpamCop-Conf: [munge]
Received: from [24.4.31.126] by spamcop.net
 with HTTP; Fri, 08 Jul 2005 21:35:59 GMT
From: SpamCop robot <mhconf.[munge]@cmds.spamcop.net>
To: [munge]@twin-dad.com
Subject: SpamCop account configuration email
Precedence: list
Message-ID: <wh42cef1bfg10d6b at msgid.spamcop.net>
Date: Fri, 08 Jul 2005 21:35:59 GMT
X-Mailer: Mozilla/4.0 (compatible; WebCapture 3.0; Windows)
 via http://www.spamcop.net/ v1.466
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on
 gator16.hostgator.com
X-Spam-Level:
X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00,FORGED_MUA_MOZILLA
 autolearn=no version=3.0.4

Hello SpamCop user,

This email contains special codes and tracking information to help SpamCop
figure out your specific email configuration.  Do not post this email in
public.  It contains confidential information related to the security of
your SpamCop account.

Please return this complete email, preserving full headers and the special
tracking codes below.  Visit this address:
http://www.spamcop.net/mcgi?action=mhreturn

Alternately, you may submit via email.  Forward the message as an
attachment to this address.  Or create a new message and paste this email
into it.  Either way, send it to to:

mhconf.[munge]@cmds.spamcop.net

Some email software may only support one or the other of these submission
methods.  For information on your email software and to learn how to get
full headers see this FAQ:
http://www.spamcop.net/fom-serve/cache/19.html

Special codes follow:
################################################################
X-SpamCop-Mx: twin-dad.com.
X-SpamCop-Mx-Ip: 70.84.62.226
X-SpamCop-Mh-Name: twin-dad.com
X-SpamCop-Recip: [munge]@twin-dad.com
X-SpamCop-Unixtime: 1120858559
X-SpamCop-Conf: [munge]
X-SpamCop-Randomness: [munge]
X-SpamCop-Hash: [munge]
################################################################

------=_NextPart_000_2407_01C583CA.AD5B6E50--