broken emails from techtarget/crn mag? omeda communications?

Michael Scheidell michael.scheidell at
Fri Jul 22 17:50:03 CEST 2011

any of you subscribed to techtarget or crm emails?

seems on june 16th or 17th, something broke. and I am trying to 
determine if its something we did or something they did.

headers come in, received, received, then a BIG BLANK LIKE, then


(its almost like they shoved an extra DATA\r\n in there. or SA did.. or 
amavisd-new did)

sometimes they are totally blank.

headers (yes, it looks like spam, this one does) but we do have people 
who subscribed to it. notice the blank line after the received header?
if you grep for 205.162.4[0-7]\.* you might see some like this.
(and, no, this is not after microsoft mangles it.. maybe amavisd/sa/dkim 
version 38 does, but I don't know)

Received: from ( [])
         by (Postfix) with ESMTP id 115F06FE15B
         for <user at>; Fri, 22 Jul 2011 10:08:50 -0400 (EDT)

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; 
t=1311343699;; s=dkim; 

Date: Fri, 22 Jul 2011 09:08:19 -0500 (CDT)
<4Oz1ccmceDmcBfmLekDNsxjec.mD.1311343694695 at>
From: CRN <CRNmagazine at>
Sender: CRN <CRNmagazine at>
Reply-To: CRN <CRNmagazine at>
To: user at
Subject: Confirm Your Free Subscription to CRN Magazine Now
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=----4Oz1ccmceDmcBfmLekDNsxjec.mD
X-MailSessionID: 4Oz1ccmceDmcBfmLekDNsxjec.mD.1311343694695


common factors seem to be their ESP

NetRange: -
NetName:        SPRINTLINK
NetHandle:      NET-205-162-40-0-1
Parent:         NET-205-160-0-0-1
NetType:        Reassigned
RegDate:        2003-11-12
Updated:        2003-11-12

OrgName:        Omeda Communications

Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
 >*| *SECNAP Network Security Corporation

    * Best Mobile Solutions Product of 2011
    * Best Intrusion Prevention Product
    * Hot Company Finalist 2011
    * Best Email Security Product
    * Certified SNORT Integrator

This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the amavis-users mailing list