[86995] in Cypherpunks

home help back first fref pref prev next nref lref last post

Re: (none)

daemon@ATHENA.MIT.EDU (Cynthia Brown)
Wed Sep 24 14:18:05 1997

Date: Wed, 24 Sep 1997 13:31:16 -0400 (EDT)
From: Cynthia Brown <cynthb@sonetis.com>
To: Matthew Ghio <ghio@temp0117.myriad.ml.org>
cc: cypherpunks@cyberpass.net
In-Reply-To: <199709240651.CAA10884@myriad>
Reply-To: Cynthia Brown <cynthb@sonetis.com>

On Wed, 24 Sep 1997, Matthew Ghio wrote:

> I drop everything with an X-UIDL or X-PMFLAGS header in it.  I don't know
> why, but spammers often flag their junkmail as such by putting one of
> these lines in it.  It sure makes it easy to delete the spam...
> 
> bureau42 Anonymous Remailer <remailer@bureau42.ml.org> wrote:
> 
> > 
> > Subject: A cypherpunks challenge.
> > 
> > Received: from 158.43.192.4 (actually max01-056.enterprise.net) by
> > bath.mail.pipex.net with SMTP (PP); Sat, 20 Sep 1997 15:40:32 +0100
> > Received: from gateway1.ml.org by mail.ml.org (8.8.5/8.6.5) with SMTP id
> > GAA02326 for <visit-our-xxx@ml.org>; Sat, 20 Sep 1997 14:36:08 -0600 (EST)
> > Date: Sat, 20 Sep 97 14:36:08 EST
> > From: hucka@eecs.umich.edu
> > To: visit-our-xxx@ml.org
> > Subject: Shut up.
> > Message-Id: <964dffe172ca4d>
> > Reply-To: postmaster@concentric.net
> > X-Pmflags: cum-see-me
> > X-Uidl: 9275163132023367354272390
> > Comments: Authenticated sender is <root@ml.org>

Another good procmail trigger is the timezone "0600 (EST)", which is a bug
in one of the more commonly used spammer programs. 

Cynthia
===============================================================
		   Cynthia H. Brown, P.Eng.
E-mail:     cynthb@iosphere.net  | PGP Key:  See Home Page
Home Page:  http://www.iosphere.net/~cynthb/
Junk mail will be ignored in the order in which it is received.

        Klein bottle for rent; enquire within.


home help back first fref pref prev next nref lref last post