broken emails from techtarget/crn mag? omeda communications?
michael.scheidell at secnap.com
Fri Jul 22 17:50:03 CEST 2011
any of you subscribed to techtarget or crm emails?
seems on june 16th or 17th, something broke. and I am trying to
determine if its something we did or something they did.
headers come in, received, received, then a BIG BLANK LIKE, then
(its almost like they shoved an extra DATA\r\n in there. or SA did.. or
sometimes they are totally blank.
headers (yes, it looks like spam, this one does) but we do have people
who subscribed to it. notice the blank line after the received header?
if you grep for 205.162.4[0-7]\.* you might see some like this.
(and, no, this is not after microsoft mangles it.. maybe amavisd/sa/dkim
version 38 does, but I don't know)
Received: from crnnetwork.com (crnnetwork.com [18.104.22.168])
by mx2.slpowers.com.ionspam.net (Postfix) with ESMTP id 115F06FE15B
for <user at domain.com>; Fri, 22 Jul 2011 10:08:50 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
t=1311343699; d=crnnetwork.com; s=dkim;
Date: Fri, 22 Jul 2011 09:08:19 -0500 (CDT)
<4Oz1ccmceDmcBfmLekDNsxjec.mD.1311343694695 at OMS05.crnnetwork.com>
From: CRN <CRNmagazine at crnnetwork.com>
Sender: CRN <CRNmagazine at crnnetwork.com>
Reply-To: CRN <CRNmagazine at crnnetwork.com>
To: user at domain.com
Subject: Confirm Your Free Subscription to CRN Magazine Now
Content-Type: multipart/mixed; boundary=----4Oz1ccmceDmcBfmLekDNsxjec.mD
common factors seem to be their ESP
NetRange: 22.214.171.124 - 126.96.36.199
OrgName: Omeda Communications
Michael Scheidell, CTO
>*| *SECNAP Network Security Corporation
* Best Mobile Solutions Product of 2011
* Best Intrusion Prevention Product
* Hot Company Finalist 2011
* Best Email Security Product
* Certified SNORT Integrator
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the amavis-users