[SpamCop.net - protecting the internet through technology]

[SC-Help] Re: Spam "from" reserved netblocks

Blammo nttp.sc.sh at bigsleep.org
Sun Jul 10 03:26:24 EDT 2005


On 09 Jul 2005 Sean Sowell entered spamcop.help and left
news:dap0g7$7h8$1 at news.spamcop.net: 

>     This message has been rejected because it has
>     a potentially executable attachment "Scoring houses - the easy
>     way!.eml" This form of attachment has been used by
>     recent viruses or other malware.
>     If you meant to send this file then please
>     package it up as a zip file and resend it.
> 

Your idiotic ISP is rejecting that with a "virus filter", which is checking 
the message body for the line 'file*="*.eml"'.
You can test this by simply sending a message with a single line exactly:

file=.eml

or maybe

name=.eml

You might have to adjust that a little, but the line must end with .eml or 
.eml"

I bitched to an ISP that was rejecting eMails with a line like:

Content-Type: message/rfc822;
 name=".com"

or

<img name="img.com"
 src="cid">

or even in your case this might bounce:

Go to <a name="link1" href="http://www.hostgator.com"
 title="Make Hostgator your home page">www.hostgator.com</a>

This is probably from a very old filter rule that is outdated and doesn't 
bother to check for a mime header, as "Content-Type: message/rfc822;" is 
certainly not an executable attachment.
What's even worse is that they are sending bounces because of this, which 
proves they are completely brain-dead.

-- 
| Ric
|


More information about the SpamCop-Help mailing list