[rescue] zeus.theratshack.org?

Mouse mouse at Rodents-Montreal.ORG
Mon Apr 25 09:15:54 EDT 2022


Recently (first example was on 2022-04-21), I've been seeing _some_ of
my sunhelp.org list mail come to me from zeus.theratshack.net instead
of ohno.mrbill.net.  Curiously, those messages show no sign of
sunhelp.org in the Received: trail, but they also do not show me in To:
or Cc:, and they have the usual List-*: headers.  But the list hasn't
simply moved; other list mail takes the usual path through mrbill.net.

The most significant ramification of this is that these messages bear a
header such as

X-Ham-Report: Spam detection software,
 running on the system "zeus.theratshack.net", 
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  True, if AJ is willing to take this on then more than happy.
 Was just putting my hand up. AJ? Richard Sent from my iPhone 
 Content analysis details:   (0.8 points, 5.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
 valid
 0.8 KAM_ASCII_DIVIDERS     Spam that uses ascii formatting tricks

Sometimes, as in the message the above quote is from, this is not a
problem.  But the "[s]pam detection software" in question is slightly
broken: when the message contains non-ASCII text early in the body,
this produces a non-syntactic header, because it doesn't escape the
content in the "Content preview:" portion of its added header, even if
it contains non-ASCII octets.  My logs indicate that I've been losing
list mail to these syntax errors.

So, anyone know what's up with this - and, perhaps more important, whom
to contact to get it fixed?

/~\ The ASCII				  Mouse
\ / Ribbon Campaign
 X  Against HTML		mouse at rodents-montreal.org
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B



More information about the rescue mailing list