[SpamCop-List] spam from localhost (127.0.0.1)

[Mike B]

"Glenn Daniels" <nobody at devnull.spamcop.net> wrote in message
news:ce0pd5$ir9$1 at news.spamcop.net...
>
> I use prserv.net aka attglobal.net. Although I process about 100 spams
> a day, I field only about three with the missing source headers. It
appears
> that they make an effort to deliver full headers, but fall short of 100%.
> Over the past month I have been forwarding all of the spams with
> missing headers to abuse at attglobal.net, but the daily incidence has been
> essentially unchanged. My sense is that one of their servers may
> deliver the "zapped" headers, while there are many others which
> provide "full headers".
>

I'm essentially clueless in this area, but I get "truncated" headers from
what I believe are more than one mailserver.

Received: from attglobal.net (localhost[127.0.0.1])
          by prserv.net (in7) with SMTP

Received: from attglobal.net (localhost[127.0.0.1])
          by prserv.net (in5) with SMTP

Received: from attglobal.net (localhost[127.0.0.1])
          by prserv.net (in2) with SMTP

etc.... by prserv.net (in8), prserv.net (in4), prserv.net (in9), prserv.net
(in6),

> However, the new info means to me that I won't be simply
> reporting it as "RFC non-compliant" as if that might mean
> something to them. Instead, I will FYI them to the missing
> headers, with request for full headers so that SpamCop can
> process the spam. If it is discretionary on their part, I see no
> harm in asking for the full headers. If they receive enough
> requests for full headers from enough clients, they may yet
> find the server that is inconsistent with the rest.
>
> Who knows, if they field a lot of complaints from a particular
> region, they may be able to localize the difficulty to a regional
> mail server. Totally guessing here, but I sense it is not a local
> problem here, given that it only affects a few spams: If the
> client is receiving mostly "clipped" headers, the problem server
> may be in closer proximity..., but it is a wild guess.
>
> Glenn
>
>

AT&T runs some internal "support" newsgroups on their news server. I posted
my problem there on the attglobalnet.admin.mail ng. Feel free to add your
more informed voice to that as well.

Mike B