It is a bug? Report: MailScanner: Could not analyze message

Fri Jun 30 17:40:51 IST 2006

Gong Chaoyin spake the following on 6/27/2006 9:19 PM:
> *the log:*
> 
> Subject: Other Bad Content Detected
> 
> The following e-mails were found to have: Other Bad Content Detected
> 
>     Sender: oaouiyauaaeyyiyaaoio at xxxxxxx.net
> <mailto:oaouiyauaaeyyiyaaoio at xxxxxxx.net>
> IP Address: 84.172.248.182 <http://84.172.248.182>
>  Recipient: davidloh at yyyyyyyy.com <mailto:davidloh at yyyyyyyy.com>,
> gloriangai at yyyyyyyy.com <mailto:gloriangai at yyyyyyyy.com>,
> 
>    Subject:  FW:I heard that ...
>  MessageID: 1FvQBh-0003U7-GS
> Quarantine: /var/spool/MailScanner/quarantine/20060628/1FvQBh-0003U7-GS
>     Report: MailScanner: Could not analyze message
>  
> *the message in 
> /var/spool/MailScanner/quarantine/20060628/1FvQBh-0003U7-GS:
> *
> 
> This is a multi-part message in MIME format.
> 
> ------=_NextPart_000_0008_01C6835A.A8FE6F20
> Content-Type: multipart/alternative;
> boundary="----=_NextPart_001_0009_01C6835A.A8FE6F20"
> 
> 
> ------=_NextPart_001_0009_01C6835A.A8FE6F20
> Content-Type: text/plain;
> charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> 
> 
> or complete and rain weight if flower. is tin to school red are rule. is
> lead to right company if comparison.
> but form else history automatic too frequent. or crack and plough wind
> but cake. ! the amount the hook swim e
> lse driving.
> must manager are flame brick if warm.
> 
> 
> ------=_NextPart_001_0009_01C6835A.A8FE6F20
> Content-Type: text/html;
> charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> 
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> 
> <HTML><HEAD>
> <META http-equiv=3DContent-Type content=3D"text/html; content=3D"MSHTML
> 6.00.2800.1528" name=3DGENERATOR>
> <STYLE></STYLE>
> </HEAD>
> <BODY bgColor=3D#ffffff>
> 
> <DIV><FONT face=3DArial size=3D2><IMG alt=3D"" hspace=3D0
> src=3D"cid:002101c6837a$38808fn0$6122zxp0 at strange38" align=3Dbaseline
> border=3D0></FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2><A
> href=3D"http://001.broadsqwitch.com">http://001.cumwinggsoon.com</A></FONT
> <http://001.broadsqwitch.com">http://001.cumwinggsoon.com</A></FONT>=
>></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial color=3D#c0c0c0 size=3D2>or different or flower gr=
> ain must rub. but mass as steel play else stitch. or dear as able addition=
>  are range.
> but frequent the shelf night and feeble. is pin to whip question to rail. =
> ! else industry as tax soft as current. and pocket to basin belief are gra=
> in.
> as steam are process monkey or tendency. the edge if drink plow but tongue=
>  too cushion too music flame to tired. or competition else milk law to to=
> e. and quality to writing farm else company.
> must look or silver profit the observation. the insect must name reading t=
> he special.else expansion but mountain curve to word. the baby but organiz=
> ation leg or profit. but care the bath silver are experience.
> <BR></FONT></DIV></BODY></HTML>
> 
That is a typical spam message. Maybe it was caught wrong, but it was caught!
It probably had bad encoding, and that is what tripped the bad content error.
Just looking at the URL's contained in the message, it looks like a porn spam.

-- 

MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!