Re: 'Errors Encountered' - Really stupid spammer trick

Tim Boyer wrote:
> Here's one I haven't seen before.  I'm getting dozens of rejects from
> the SpamCop marked 'Errors Encountered'.  When I look at them, it's
> obvious why.

You shouldn't be exposing/posting your 'sekrit' submit address here -- 
that is personal/private information associated with your reporting
account and little badboys can create some reporting trouble with that
information.

When SC receives a spam addressed to your report submitting address, it
isn't going to parse.

> Apparently, some spammer is being kind enough to send spam directly
> to my SpamCop reporting address!  I'd thing that this should be
> encouraged - I don't have to even forward it.  It's a real timesaver.
> Eliminate the middleman, and all that.

Yabbut;  it doesn't work.

> However, SpamCop doesn't like it:

Exactly.

> SpamCop encountered errors while saving spam for processing:
> SpamCop could not find your spam message in this email:

When you email submit a spam properly, there are two sets of headers.
The topmost set is the set which is from you to spamcop at your submit
followed by some attachment structure.  The next set is the spam headers
which is where SC starts parsing for source.

If spam goes directly to the submit, then SC skips the top headers which
are supposed to be from you to SC and goes to the next headers which are
absent.

> I'm not sure what to do about this.  I'm not sure what _could_ be
> done about this.  It's begun to constitute the majority of the spam
> getting through to me.
>
> Any way to get SpamCop to be able to parse these?

No.  And they weren't addressed to you.  You aren't supposed to submit
spam which isn't addressed to an account which is your email account,
such as misdirected bounces.  These were addressed to a spamcop.net
submit address.

And to be perfectly secure, since you've exposed the submit address
here, some might say that you should get a new one.  If it is on spammer
lists, it would be just as well to get a new one anyway.  In the old
days you would just register a free account as many times as you like,
but I think you are supposed to communicate with a deputy now.

Here's a contact page http://spamcop.net/fom-serve/cache/401.html  How
can I contact a SpamCop representative?

Tim Boyer wrote:
> Here's one I haven't seen before.  I'm getting dozens of rejects from
> the SpamCop marked 'Errors Encountered'.  When I look at them, it's
> obvious why.

erm.. I'm not an admin but you shouldn't post the submit. email addy.
spammers might get it. :)

Someone at SC is going to have to get you a new reporting address to use.
(I think that amounts to a new account)

-- 
DougW 

"Tim Boyer" <tim@denmantire.com> wrote in message 
news:12itn3ddpo9jenti61jhnie4ir3kol9acb@4ax.com...
> -0800 (PST)
>
> <spam snipped>
>
> Apparently, some spammer is being kind enough to send spam directly to my
> SpamCop reporting address!  I'd thing that this should be encouraged - I 
> don't
> have to even forward it.  It's a real timesaver.  Eliminate the middleman,

> and
> all that.
>
> However, SpamCop doesn't like it:
>
> SpamCop encountered errors while saving spam for processing:
> SpamCop could not find your spam message in this email:
>
> I'm not sure what to do about this.  I'm not sure what _could_ be done 
> about
> this.  It's begun to constitute the majority of the spam getting through 
> to me.
>
> Any way to get SpamCop to be able to parse these?

No, and since your submit address is obviously compromised you should ask 
the deputies to kill it and then you make a new one.

You didn't join some social networking site and let it send invitationson 
your behalf to your address book contacts did you? 

Here's one I haven't seen before.  I'm getting dozens of rejects from the
SpamCop marked 'Errors Encountered'.  When I look at them, it's obvious why.

Return-Path: <cocolo012@yahoo.com.au>
Received: from sc-smtp4-bulkmx.soma.ironport.com
(sc-smtp4-bulkmx.soma.ironport.com [204.15.82.126])
	by sc-app5.soma.ironport.com (Postfix) with ESMTP id D35B4D47079
	for <submit.85fu3lldrcntsanc@spam.spamcop.net>; Fri,  4 Jan 2008
11:41:15 -0800 (PST)
X-Fozzie-Original-To: submit.85fu3lldrcntsanc@spam.spamcop.net
X-Fozzie-Original-To: submit.85fu3lldrcntsanc@spam.spamcop.net
X-Fozzie-Original-To: submit.85fu3lldrcntsanc@spam.spamcop.net
Received: from unknown (HELO odn.ne.jp) ([218.107.40.108])
  by vmx2.spamcop.net with ESMTP; 04 Jan 2008 11:41:08 -0800
Received: from xN5ABa2lL (unknown [78.203.245.247])
	by odn.ne.jp (Coremail) with SMTP id i0cBfGdniHulLc2R.1
	for <submit.85fu3lldrcntsanc@spam.spamcop.net>; Sat, 05 Jan 2008
04:41:13 +0800 (CST)
X-Originating-IP: [78.203.245.247]
Subject: =?iso-2022-jp?B?GyRCJGgkbSQ3JC8kKjRqJCRDVyQ3JF4kORsoQg==?=
From: "megumegu" <cocolo012@yahoo.com.au>
To: <submit.85fu3lldrcntsanc@spam.spamcop.net>
X-Mailer: Microsoft Outlook Express 6.00.2800.1478
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0007_01C8467E.6E9066C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Message-Id: <20080104194115.D35B4D47079@sc-app5.soma.ironport.com>
Date: Fri,  4 Jan 2008 11:41:15 -0800 (PST)

<spam snipped>

Apparently, some spammer is being kind enough to send spam directly to my
SpamCop reporting address!  I'd thing that this should be encouraged - I don't
have to even forward it.  It's a real timesaver.  Eliminate the middleman, and
all that.

However, SpamCop doesn't like it:

SpamCop encountered errors while saving spam for processing:
SpamCop could not find your spam message in this email:

I'm not sure what to do about this.  I'm not sure what _could_ be done about
this.  It's begun to constitute the majority of the spam getting through to me.

Any way to get SpamCop to be able to parse these?

-- 
tim boyer

On Fri, 4 Jan 2008 18:55:02 -0600, "bar0" <nobody@spamcop.net>
wrote:

>
>"Tim Boyer" <tim@denmantire.com> wrote in message 
>news:12itn3ddpo9jenti61jhnie4ir3kol9acb@4ax.com...
>> -0800 (PST)
>>
>> <spam snipped>
>>
>> Apparently, some spammer is being kind enough to send spam directly to
my
>> SpamCop reporting address!  I'd thing that this should be encouraged -
I 
>> don't
>> have to even forward it.  It's a real timesaver.  Eliminate the
middleman, 
>> and
>> all that.
>>
>> However, SpamCop doesn't like it:
>>
>> SpamCop encountered errors while saving spam for processing:
>> SpamCop could not find your spam message in this email:
>>
>> I'm not sure what to do about this.  I'm not sure what _could_ be done

>> about
>> this.  It's begun to constitute the majority of the spam getting
through 
>> to me.
>>
>> Any way to get SpamCop to be able to parse these?
>
>No, and since your submit address is obviously compromised you should ask 
>the deputies to kill it and then you make a new one.
>
>You didn't join some social networking site and let it send invitationson 
>your behalf to your address book contacts did you? 
>

<splorf>

Um.  No.  I've been here on Spamcop since it was pay-by-the-byte; I've been on
nana-e since before it was nana-e.

-- 
tim boyer