1285 – Missed this spam!

Bug 1285 - Missed this spam!

Summary: Missed this spam!

Status:	RESOLVED FIXED

Alias:	None

Product:	Spamassassin
Classification:	Unclassified
Component:	Rules (show other bugs)
Version:	2.43
Hardware:	Other other

Importance:	P2 normal
Target Milestone:	---
Assignee:	SpamAssassin Developer Mailing List

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2002-12-12 07:28 UTC by Joseph Tate
Modified:	2002-12-12 05:37 UTC (History)
CC List:	0 users

Attachment	Type	Modified	Status	Actions	Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Joseph Tate 2002-12-12 07:28:08 UTC

One of my users is getting a lot of e-mail in the following format.  SMTPit
seems to be a new spamming tool, although a legitimate plugin to FileMaker

Return-Path: <support@lsanca1-ar16-4-46-010-240.lsanca1.dsl-verizon.net>
X-Sieve: cmu-sieve 2.0
Return-Path: <support@lsanca1-ar16-4-46-010-240.lsanca1.dsl-verizon.net>
Received: from lsanca1-ar16-4-46-054-037.lsanca1.dsl-verizon.net
(lsanca1-ar16-4-46-054-037.lsanca1.dsl-verizon.net [4.46.54.37])
	by mail2.mi-corporation.com (Postfix) with ESMTP id 45CF65623B
	for <gclary@mi-corporation.com>; Wed, 11 Dec 2002 19:49:54 -0500 (EST)
Received: from sl1 (192.168.1.101) by
lsanca1-ar16-4-46-054-037.lsanca1.dsl-verizon.net (LSMTP for Windows NT v1.1b)
with SMTP id <0.00005827@lsanca1-ar16-4-46-054-037.lsanca1.dsl-verizon.net>;
Wed, 11 Dec 2002 16:16:56 -0800
Message-ID: <200212111616526702@192.168.1.100>
X-Mailer: SMTPit - FileMaker Pro Email Plugin (win ver. 3.0.7)
Mime-Version: 1.0
Content-Type: multipart/alternative;
    boundary="= Multipart Boundary 02121116165217768"
Date: Wed, 11 Dec 2002 16:16:52 -0800
To: <gclary@mi-corporation.com>
From: Varicose Vein Relief
<support@lsanca1-ar16-4-46-010-240.lsanca1.dsl-verizon.net>
Subject: Natural remedy for varicose veins
X-Spam-Status: No, hits=2.9 required=5.0
	tests=DISCLAIMER,MIME_LONG_LINE_QP,SPAM_PHRASE_05_08,WEB_BUGS,
	      X_MAILER_SMTPIT
	version=2.43
X-Spam-Level: **

<html><body bgcolor="#ffffff"><br>
<IMG src="http://cfm.listo01.com/where.cfm?id=keyword2" height="1" width="1"
border=0>
<IMG src="http://stats.whoisitnow.com/where.cfm?id=salmon" height="1" width="1"
border=0>
<img
src="http://www.null.com/FMPro?-db=tr.fp5&-format=tr.htm&e=gclary@mi-corporation.com
&b=vein&-new"
border="0" width="2" height="1">
<table width="500" border="1" align="center" cellpadding="0" cellspacing="0"
bordercolor="B2629E">
  <tr>
    <td><table border="0" cellpadding="0" cellspacing="0" width="500">
        <tr>
          <td><img name="veinmailer_r1_c1"
src="http://www.yourfinesite.com/vein/images/veinmailer_r1_c1.gif" width="500"
height="72" border="0" alt=""></td>
        </tr>
        <tr>
          <td><img name="veinmailer_r2_c1"
src="http://www.yourfinesite.com/vein/images/veinmailer_r2_c1.gif" width="500"
height="21" border="0" alt=""></td>
        </tr>
        <tr>
          <td><table border="0" cellpadding="0" cellspacing="0" width="500">
              <tr>
                <td valign="top"><img name="veinmailer_r3_c1"
src="http://www.yourfinesite.com/vein/images/veinmailer_r3_c1.gif" width="126"
height="123" border="0" alt=""></td>
                <td height="123"><table width="365" border="0" align="center"
cellpadding="0" cellspacing="0">
                    <tr>
                      <td><font size="2" face="Verdana, Arial, Helvetica,
sans-serif">Ultra
                        Vein-Gard is a revolutionary, new natural remedy for
healthy,
                        beautiful legs.</font></td>
                    </tr>
                    <tr>
                      <td><table width="365" border="0" align="center"
cellpadding="0" cellspacing="0">
                          <tr>
                            <td>&nbsp;</td>
                          </tr>
                          <tr>
                            <td><strong><font size="2" face="Verdana, Arial,
Helvetica, sans-serif"><img
src="http://www.yourfinesite.com/vein/images/circle.gif" width="13" height="19"
align="absmiddle">
                              Improves the appearance of bulging, bluish,
lumpy-looking
                              varicose veins.</font></strong></td>
                          </tr>
                          <tr>
                            <td><strong><font size="2" face="Verdana, Arial,
Helvetica, sans-serif"><img
src="http://www.yourfinesite.com/vein/images/circle.gif" width="13" height="19"
align="absmiddle">
                              Improves the appearance of embarrassing spider
veins</font></strong></td>
                          </tr>
                          <tr>
                            <td><strong><font size="2" face="Verdana, Arial,
Helvetica, sans-serif"><img
src="http://www.yourfinesite.com/vein/images/circle.gif" width="13" height="19"
align="absmiddle">
                              Relieves itchiness and swollen legs and feet, and
                              </font></strong></td>
                          </tr>
                          <tr>
                            <td><strong><font size="2" face="Verdana, Arial,
Helvetica, sans-serif"><img
src="http://www.yourfinesite.com/vein/images/circle.gif" width="13" height="19"
align="absmiddle">
                              Relieves tired, aching legs and
feet</font></strong></td>
                          </tr>
                        </table></td>
                    </tr>
                  </table></td>
              </tr>
            </table></td>
        </tr>
        <tr>
          <td>&nbsp;</td>
        </tr>
        <tr>
          <td><table width="475" border="0" align="center" cellpadding="0"
cellspacing="0">
              <tr>
                <td><font size="2" face="Verdana, Arial, Helvetica,
sans-serif">Vein-Gard
                  contains no synthetic drugs. There are no side effects, and
                  it does not interfere with other medications.<strong> </strong>
                  In fact, it's the world's best, most complete, highest potency,
                  and most effective remedy available for healthy legs. It consists
                  of an exclusive capsuled supplement&#8211;which works from the
                  inside of your body out.</font></td>
              </tr>
              <tr>
                <td>&nbsp;</td>
              </tr>
              <tr>
                <td><font size="2" face="Verdana, Arial, Helvetica,
sans-serif"><strong>Will
                  Vein-Gard help Prevent these Problems too?</strong></font></td>
              </tr>
              <tr>
                <td><font size="2" face="Verdana, Arial, Helvetica, sans-serif">Yes.
                  Definitely! Today, most people understand that it is the way
                  in which we care for our bodies that determines how healthy
                  we are, and how long we live. Supported by the latest scientific
                  research, Vein-Gard helps guard against these leg problems by
                  getting to the underlying cause of the condition before it
starts.</font></td>
              </tr>
            </table></td>
        </tr>
        <tr>
          <td>&nbsp;</td>
        </tr>
        <tr>
          <td><table border="0" cellpadding="0" cellspacing="0" width="500">
              <tr>
                <td><a href="http://www.yourfinesite.com/vein/form.html"><img
name="veinmailer_r5_c1"
src="http://www.yourfinesite.com/vein/images/veinmailer_r5_c1.gif" width="126"
height="34" border="0" alt=""></a></td>
                <td><img name="veinmailer_r5_c2"
src="http://www.yourfinesite.com/vein/images/veinmailer_r5_c2.gif" width="33"
height="34" border="0" alt=""></td>
                <td><img name="veinmailer_r5_c3"
src="http://www.yourfinesite.com/vein/images/veinmailer_r5_c3.gif" width="341"
height="34" border="0" alt=""></td>
              </tr>
            </table></td>
        </tr>
        <tr>
          <td><img name="veinmailer_r6_c1"
src="http://www.yourfinesite.com/vein/images/veinmailer_r6_c1.gif" width="500"
height="29" border="0" alt=""></td>
        </tr>
      </table></td>
  </tr>
</table>
<br>
<table width="600" border="0" align="center" cellpadding="0" cellspacing="0">
  <tr>
    <td><table width="468" border="0" align="center" cellpadding="0"
cellspacing="0">
        <!-- fwtable fwsrc="footer.png" fwbase="header-footer.gif"
fwstyle="Dreamweaver" fwdocid = "742308039" fwnested="0" -->
        <tr>
          <td><img src="images/spacer.gif" width="468" height="1" border="0"
alt=""></td>
          <td><img src="images/spacer.gif" width="1" height="1" border="0"
alt=""></td>
        </tr>
        <tr>
          <td><a href="http://www.yourfinesite.com/genericform.cfm"><img
name="headerfooter_r1_c1"
src="http://www.yourfinesite.com/images/header-footer_r1_c1.gif" width="468"
height="28" border="0" alt=""></a></td>
          <td><img src="images/spacer.gif" width="1" height="28" border="0"
alt=""></td>
        </tr>
        <tr>
          <td><div align="center"><font size="2" face="Verdana, Arial,
Helvetica, sans-serif">We
              can show you how, with New Marketing techniques and innovative ideas
              for your products and services</font></div></td>
          <td><img src="images/spacer.gif" width="1" height="12" border="0"
alt=""></td>
        </tr>
        <tr>
          <td><a href="http://www.yourfinesite.com/genericform.cfm"><img
name="headerfooter_r3_c1"
src="http://www.yourfinesite.com/images/header-footer_r3_c1.gif" width="468"
height="20" border="0" alt=""></a></td>
          <td><img src="images/spacer.gif" width="1" height="20" border="0"
alt=""></td>
        </tr>
      </table></td>
  </tr>
  <tr>
    <td><font color="#000000" size="1" face="Arial">This message is an
advertisement to
gclary@mi-corporation.com. We will continue to bring you valuable permission
based messages on the
      products and services that interest you most unless you wish to <a
href="http://www.yourfinesite.com/help.html">decline</a>.
      We process all requests immediately. Copyright 2000, 2001, 2002 all rights
      reserved.</font><font size="1">&nbsp; </font></td>
  </tr>
</table>
<IMG src="http://stats.whoisitnow.com/where.cfm?id=vein" height="1" width="1"
border=0><br><br><br><br><br><br><br><br><br><br><br><br><br><br><br></body></html>

<p>
-----------------------------------------------------------------------<br>
This email was sent to you using a demo version of SMTPit--A FileMaker<br>
  Pro plug-in developed by Comm-Unity Networking Systems (CNS).<br>
Disclaimer: CNS and SMTPit are in no way connected with the above<br>
  email. SMTPit is simply a program that sends out email. CNS is not<br>
  responsible for any unwanted email sent to you using this software.<br>
For more information about SMTPit, visit us at<br>
  http://www.cnsplug-ins.com/</p>

Comment 1 Daniel Quinlan 2002-12-12 14:37:29 UTC

Thanks.  I added a test rule to CVS for that X-Mailer.  We'll see
how it works in testing and include it in the next version if it works
well.

In the future, please attach example emails using the "Create a new attachment"
link instead of doing a cut-and-paste.  Thanks.