[Mailman-Users] FW: Spamassassin content preview ending up posted to list
Peter Shute
pshute at nuw.org.au
Thu Nov 6 02:50:12 CET 2014
Sorry, I forgot to Cc the list.
-----Original Message-----
From: Peter Shute
Sent: Thursday, 6 November 2014 12:49 PM
To: 'Mark Sapiro'
Subject: RE: [Mailman-Users] Spamassassin content preview ending up posted to list
The dot was missing in the X-Ham-Report header but not in the message body in the moderation notice.
It was missing from both in the message the list sent out, which made me think the list thought the content preview in the X-Ham-Report header was the message, and discarded the rest.
I received the moderation notice via Exchange/Outlook, so I'm not sure there isn't more to it that I can't see. Outlook will only show me the headers, not the whole raw message. In an attempt to get a raw message for you to look at, I opened the message attached tot he moderation notice, then used Outlook's Resend option to send it to my gmail account. Below is what gmail calls the "original message". However, you'll notice that there is no X-Ham-Report header! I'm assuming Outlook/Exchange or gmail stripped it out on the way to my gmail mailbox. So I've added the headers I see in Outlook below the full message.
It might be that Outlook/Exchange has totally rewritten the headers and content, so apologies if that's the case.
The difference between these and what arrived from the list is that it's plain text only, and the URL mentioned hase changed from:
http://sunshinecoastbirds.blogspot.com.au/2014/11/yandina-creek-wetlands-and-its.html
to:
http://sunshinecoastbirdsblogspot.com.au/2014/11/yandina-creek-wetlands-and-its.html
Note that the first dot in the URL has gone. The only place I can see a matching URL is in the content preview.
Delivered-To: xxx22 at gmail.com
Received: by 10.217.2.18 with SMTP id o18csp37651wes;
Wed, 5 Nov 2014 14:41:09 -0800 (PST)
X-Received: by 10.68.211.193 with SMTP id ne1mr168364pbc.49.1415227268221;
Wed, 05 Nov 2014 14:41:08 -0800 (PST)
Return-Path: <xxx at nuw.org.au>
Received: from NUWVICMS2.nuw.org.au (mailout.nuw.org.au. [202.183.101.44])
by mx.google.com with ESMTPS id rg11si4172892pdb.142.2014.11.05.14.41.06
for <xxx22 at gmail.com>
(version=TLSv1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Wed, 05 Nov 2014 14:41:07 -0800 (PST)
Received-SPF: none (google.com: xxx at nuw.org.au does not designate permitted sender hosts) client-ip=202.183.101.44;
Authentication-Results: mx.google.com;
spf=neutral (google.com: xxx at nuw.org.au does not designate permitted sender hosts) smtp.mail=xxx at nuw.org.au
Received: from NUWVICMS2.nuw.org.au ([192.168.0.36]) by nuwvicms2
([192.168.0.36]) with mapi; Thu, 6 Nov 2014 09:41:03 +1100
From: Peter Shute <xxx at nuw.org.au>
To: "'xxx22 at gmail.com'" <xxx22 at gmail.com>
Date: Thu, 6 Nov 2014 09:41:02 +1100
Subject: Lewin's Rail, Spotless Crake and other Good Birds at Threatened Sunshine Coast Wetland
Thread-Topic: Lewin's Rail, Spotless Crake and other Good Birds at Threatened Sunshine Coast Wetland
Thread-Index: Ac/4qG3uhKgRA3eBQdqoWtgYFONxDQ==
Message-ID: <C2F1879073AE7347BAB44065F143E17001826088F7 at nuwvicms2>
Reply-To: Greg yyy <yyy at westnet.com.au>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ironport-av: E=Sophos;i="5.07,317,1413216000";
d="scan'208,217";a="377715616"
x-originating-ip: 124.150.99.243
x-spam-status: No, score=-0.9
x-ironport-anti-spam-result: Ah8LAJiYWVQKAiw6/2dsb2JhbABbgkhGVFkEgjK4XQaTWohlFgEBAQEBfYN5M24GAQk1AkIdG4gjAQETDqJGhzWIDYcBjjSGN41XgVQFhiKLf2KDb485A44ygVMBYIFWKy8BgUeBAwEBAQ
x-ironport-anti-spam-filtered: true
x-spam-flag: NO
x-spam-score: -8
x-spam-bar: /
acceptlanguage: en-US
Content-Type: multipart/alternative;
boundary="_000_C2F1879073AE7347BAB44065F143E17001826088F7nuwvicms2_"
MIME-Version: 1.0
--_000_C2F1879073AE7347BAB44065F143E17001826088F7nuwvicms2_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64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--_000_C2F1879073AE7347BAB44065F143E17001826088F7nuwvicms2_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
PGh0bWw+PGJvZHkgc3R5bGU9ImZvbnQtZmFtaWx5OiAnSGVsdmV0aWNhIE5ldWUnLEhlbHZl
PGh0bWw+dGlj
YSxBcmlhbCxzYW5zLXNlcmlmOyBmb250LXNpemU6IDEycHg7Ij48YnIgLz48ZGl2PkkgaGVhcmQg
b3Igc2F3IDUgTGV3aW4ncyBSYWlscyBhbmQgMTIgU3BvdGxlc3MgQ3Jha2VzIHRvZGF5IGF0IGEg
bmV3bHkgZGlzY292ZXJlZCB3ZXRsYW5kIGF0IFlhbmRpbmEgQ3JlZWsgb24gdGhlIFN1bnNoaW5l
IENvYXN0LiBPdGhlciBnb29kIGJpcmRzIGFib3V0IGluY2x1ZGVkIEJsYWNrLW5lY2tlZCBTdG9y
aywgUmVkLW5lY2tlZCBBdm9jZXQsIExpdHRsZSBHcmFzc2JpcmQgYW5kIGEgZnJlZS1mbHlpbmcg
TWFsbGFyZDsgZ2VudWluZWx5IHdpbGQgTWFsbGFyZHMgYXJlIHJhcmUgaW4gc291dGgtZWFzdCBR
dWVlbnNsYW5kLjwvZGl2PjxkaXY+PGJyIC8+PC9kaXY+PGRpdj5UaGlzIGV4dGVuc2l2ZSBh
dWVlbnNsYW5kLjwvZGl2PjxkaXY+PGJyIC8+PC9kaXY+cmVh
IG9mIGdyYXNzbGFuZCBhbmQgd2V0bGFuZCBoYXMgZW5vcm1vdXMgcG90ZW50aWFsIGJ1dCBpcyB0
aHJlYXRlbmVkIGJ5IGRldmVsb3BtZW50LiBUaGUgU3Vuc2hpbmUgQ29hc3QgUmVnaW9uYWwgQ291
bmNpbCBpcyBiZWluZyB1cmdlZCB0byBwdXJjaGFzZSBzb21lIG9mIHRoZSBwcml2YXRlbHkgb3du
ZWQgbGFuZCB0byBjb25zZXJ2ZSBhbmQgbWFuYWdlIHRoZSB3ZXRsYW5kcy48L2Rpdj48ZGl2Pjxi
ciAvPjwvZGl2PjxkaXY+U2VlIGhlcmUgZm9yIHBpY3R1cmVzLCBmdXJ0aGVyIGluZm9ybWF0
ciAvPjwvZGl2PjxkaXY+aW9u
IGFuZCBhIGxpbmsgd2hlcmUgcGVvcGxlIGNhbiBjb250YWN0IHRoZSBtYXlvciBpZiB0aGV5IHdh
bnQgdG8gc2VlIHRoZSBhcmVhIHByb3RlY3RlZDo8L2Rpdj48ZGl2PjxiciAvPjwvZGl2PjxkaXY+
aHR0cDovL3N1bnNoaW5lY29hc3RiaXJkcy5ibG9nc3BvdC5jb20uYXUvMjAxNC8xMS95YW5kaW5h
LWNyZWVrLXdldGxhbmRzLWFuZC1pdHMuaHRtbDwvZGl2PjxkaXY+PGJyIC8+PC9kaXY+PGRp
LWNyZWVrLXdldGxhbmRzLWFuZC1pdHMuaHRtbDwvZGl2PjxkaXY+PGJyIC8+PC9kaXY+dj5H
cmVnIFJvYmVydHPCoDwvZGl2PjxiciAvPjwvYm9keT48L2h0bWw+DQo=
--_000_C2F1879073AE7347BAB44065F143E17001826088F7nuwvicms2_--
These are the headers I can see in the message attached to the moderation notice before I sent it to gmail:
Received: from webmail.icp-osb-irony-out4.external.iinet.net.au ([203.59.1.232]:24685)
by cloud3.emwd.com with esmtp (Exim 4.82)
(envelope-from <ninderry at westnet.com.au>)
id 1XlrFh-003a2i-HB
for birding-aus at birding-aus.org; Tue, 04 Nov 2014 22:27:23 -0500
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Ah8LAJiYWVQKAiw6/2dsb2JhbABbgkhGVFkEgjK4XQaTWohlFgEBAQEBfYN5M24GAQk1AkIdG4gjAQETDqJGhzWIDYcBjjSGN41XgVQFhiKLf2KDb485A44ygVMBYIFWKy8BgUeBAwEBAQ
X-IronPort-AV: E=Sophos;i="5.07,317,1413216000";
d="scan'208,217";a="377715616"
Received: from unknown (HELO localhost) ([10.2.44.58])
by icp-osb-irony-out4.iinet.net.au with ESMTP; 05 Nov 2014 11:27:17 +0800
Message-ID: <0e7de907fab48b1832d57dd6d35803a847068db6 at webmail.westnet.com.au>
From: "Greg Roberts" <ninderry at westnet.com.au>
Reply-To: "Greg Roberts" <ninderry at westnet.com.au>
To: "birding-aus" <birding-aus at birding-aus.org>
X-Mailer: Atmail 6.6.0.13042
X-Originating-IP: 124.150.99.243
Subject: Lewin's Rail, Spotless Crake and other Good Birds at Threatened Sunshine Coast Wetland
Date: Wed, 5 Nov 2014 13:27:17 +1000
Content-Type: multipart/alternative;
boundary="=_bf3f4cd6b721f8d50a7e7df8a17b7a9d"
MIME-Version: 1.0
X-Spam-Status: No, score=-0.9
X-Spam-Score: -8
X-Spam-Bar: /
X-Ham-Report: Spam detection software, running on the system "cloud3.emwd.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see root\@localhost for details.
Content preview: I heard or saw 5 Lewin's Rails and 12 Spotless Crakes today
at a newly discovered wetland at Yandina Creek on the Sunshine Coast. Other
good birds about included Black-necked Stork, Red-necked Avocet, Little Grassbird
and a free-flying Mallard; genuinely wild Mallards are rare in south-east
Queensland. This extensive area of grassland and wetland has enormous potential
but is threatened by development. The Sunshine Coast Regional Council is
being urged to purchase some of the privately owned land to conserve and manage
the wetlands. See here for pictures, further information and a link where
people can contact the mayor if they want to see the area protected: http://sunshinecoastbirdsblogspot.com.au/2014/11/yandina-creek-wetlands-and-its.html
Greg Roberts? [...]
Content analysis details: (-0.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[203.59.1.232 listed in list.dnswl.org]
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
1.0 KAM_LIVE blogspot.com & livejournal.com likely spam (Apr 2010)
X-Spam-Flag: NO
> -----Original Message-----
> From: Mailman-Users
> [mailto:mailman-users-bounces+pshute=nuw.org.au at python.org]
> On Behalf Of Mark Sapiro
> Sent: Thursday, 6 November 2014 11:39 AM
> To: mailman-users at python.org
> Subject: Re: [Mailman-Users] Spamassassin content preview ending up
> posted to list
>
> On 11/05/2014 01:03 PM, Peter Shute wrote:
> >
> > Looking at the original message in the moderation alert
> email, it looks ok to me, but I can see that the dot has been dropped
> in the content preview in the X-Ham-Report header which I think
> spamassassin has inserted. This header has multiple lines, including
> blank lines, and I'm wondering if it's confusing mailman.
>
>
> So, if I understand correctly, the missing dot is only in an
> X-Ham-Report header. Was this header correct in the moderation notice?
>
> Or are you saying that the dot was present in the body of the
> message in the held message notice, but not in the body of
> the delivered message?
>
> It would help if you could post the entire RAW message that
> was attached to the held message notice (address obfuscation
> OK) and point out how this differs from the message delivered
> to the list.
>
> In any case, Mailman (actually the underlying Python library)
> might possibly unfold and refold the X-Ham-Report header, but
> other than that, it should be untouched and have no effect on Mailman.
>
> Is it possible that the original message in the held notice
> was multipart/alternative with text/plain and text/html
> alternatives, and you saw the text/html alternative which was
> correct, but this was removed by Mailman's content filtering
> collapse_alternatives leaving the text/plain part which
> wasn't? If that's the case, blame the user's MUA (if it's
> Yahoo, it's almost certainly the culprit).
>
> --
> Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
> San Francisco Bay Area, California better use your sense - B. Dylan
> ------------------------------------------------------
> Mailman-Users mailing list Mailman-Users at python.org
> https://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy:
> http://wiki.list.org/x/QIA9 Searchable Archives:
> http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe:
> https://mail.python.org/mailman/options/mailman-users/pshute%4
0nuw.org.au
>
More information about the Mailman-Users
mailing list