What's this: Antigen Notification... ?
Just received the message below. It seems to refer to a message I have sent to this list. There is no real "from"... Anybody knows what this is? Daniel ---------- Forwarded Message ---------- Subject: Antigen Notification: Antigen found a message matching a filter Date: Tuesday 07 November 2006 15:50 From: Antigen_TRACYDC14 To: linux@daniel-bauer.com Microsoft Antigen for Exchange found a message matching a filter. The message is currently Purged. Message: "Re_ _SLE_ Thunderbird _ Printing to File" Filter name: "KEYWORD= spam: xxx " Sent from: "Daniel Bauer " Folder: "SMTP Messages\Inbound" Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14" ------------------------------------------------------- -- Daniel Bauer photographer Basel Switzerland professional photography: http://www.daniel-bauer.com Madagascar special: http://www.sanic.ch Microsoft Antigen for Exchange found a message matching a filter. The message is currently Purged. Message: "Re_ _SLE_ Thunderbird _ Printing to File" Filter name: "KEYWORD= spam: xxx " Sent from: "Daniel Bauer " Folder: "SMTP Messages\Inbound" Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"
Daniel Bauer wrote:
Just received the message below.
It seems to refer to a message I have sent to this list. There is no real "from"...
Anybody knows what this is?
Daniel ---------- Forwarded Message ----------
Subject: Antigen Notification: Antigen found a message matching a filter Date: Tuesday 07 November 2006 15:50 From: Antigen_TRACYDC14 To: linux@daniel-bauer.com
Microsoft Antigen for Exchange found a message matching a filter. The message is currently Purged. Message: "Re_ _SLE_ Thunderbird _ Printing to File" Filter name: "KEYWORD= spam: xxx " Sent from: "Daniel Bauer " Folder: "SMTP Messages\Inbound" Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"
[pruned] Ah, you got one as well :-) . Same topic, same addressee. Ah, M$... crap one day, pure rubbish the next! :-) Cheers. -- "If the terrier and the bariffs are torn down, this economy will grow." George W. Bush January 2000
On Wed, 2006-11-08 at 02:11 +1100, Basil Chupin wrote: [pruned]
Ah, you got one as well :-) . Same topic, same addressee.
Ah, M$... crap one day, pure rubbish the next! :-)
More like misconfigured software, if the use doesn't like the filtered material, there is no sense telling the sender that s/he doesn't like it, but to just bit bucket it.
Daniel Bauer wrote:
Just received the message below.
It seems to refer to a message I have sent to this list. There is no real "from"...
Anybody knows what this is?
Daniel ---------- Forwarded Message ----------
Subject: Antigen Notification: Antigen found a message matching a filter Date: Tuesday 07 November 2006 15:50 From: Antigen_TRACYDC14 To: linux@daniel-bauer.com
Microsoft Antigen for Exchange found a message matching a filter. The message is currently Purged. Message: "Re_ _SLE_ Thunderbird _ Printing to File" Filter name: "KEYWORD= spam: xxx " Sent from: "Daniel Bauer " Folder: "SMTP Messages\Inbound" Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"
Looks like a message from Sybari's Antigen for Microsoft Exchange: http://www.sybari.com/portal/alias__Rainbow/lang__en-US/tabID__3345/DesktopD... Maybe they should change the slogan from: "Stop Messaging Threats to Improve Business Productivity" to "Stop Business Productivity to Improve Messaging Threats" ;-) -- Geir A. Myrestrand
Geir A. Myrestrand wrote:
Daniel Bauer wrote:
Just received the message below.
It seems to refer to a message I have sent to this list. There is no real "from"...
Anybody knows what this is?
Daniel ---------- Forwarded Message ----------
Subject: Antigen Notification: Antigen found a message matching a filter Date: Tuesday 07 November 2006 15:50 From: Antigen_TRACYDC14 To: linux@daniel-bauer.com
Microsoft Antigen for Exchange found a message matching a filter. The message is currently Purged. Message: "Re_ _SLE_ Thunderbird _ Printing to File" Filter name: "KEYWORD= spam: xxx " Sent from: "Daniel Bauer " Folder: "SMTP Messages\Inbound" Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"
Looks like a message from Sybari's Antigen for Microsoft Exchange: http://www.sybari.com/portal/alias__Rainbow/lang__en-US/tabID__3345/DesktopD...
Maybe they should change the slogan from:
"Stop Messaging Threats to Improve Business Productivity"
to
"Stop Business Productivity to Improve Messaging Threats"
;-)
Looks like it is from Sony (assuming it is not forged)... I captured this from the mail header: from mail pickup service by tracydc14.psp.com with Microsoft SMTPSVC; Tue, 7 Nov 2006 08:15:18 -0700 I checked psp.com in whois: Registrant: Sony Computer Entertainment Europe 25 Golden Square London London W1F 9LU UK Domain name: psp.com Created on: 1996-11-05 Expires on: 2007-11-04 Administrative contact: Sony Webmaster 30 Golden Square London W1F 9LD UK +44 20 7859 5000 domainadmin@scee.net Technical contact: Role Netnames Hostmaster 3rd Floor Prospero House 241 Borough High St. London SE1 1GA UK +44 (0)20 7015 9370 +44 (0)20 7015 9375 hostmaster@netnames.net Domain name servers: cetcdns001.online.scee.com 217.18.19.184 cetcdns002.online.scee.com 217.18.19.185 cetcdns003.online.scee.com 217.18.16.223 -- Geir A. Myrestrand
Geir A. Myrestrand wrote:
Geir A. Myrestrand wrote:
Daniel Bauer wrote:
Just received the message below.
It seems to refer to a message I have sent to this list. There is no real "from"...
Anybody knows what this is?
Daniel ---------- Forwarded Message ----------
Subject: Antigen Notification: Antigen found a message matching a filter Date: Tuesday 07 November 2006 15:50 From: Antigen_TRACYDC14 To: linux@daniel-bauer.com
Microsoft Antigen for Exchange found a message matching a filter. The message is currently Purged. Message: "Re_ _SLE_ Thunderbird _ Printing to File" Filter name: "KEYWORD= spam: xxx " Sent from: "Daniel Bauer " Folder: "SMTP Messages\Inbound" Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"
Looks like a message from Sybari's Antigen for Microsoft Exchange: http://www.sybari.com/portal/alias__Rainbow/lang__en-US/tabID__3345/DesktopD...
Maybe they should change the slogan from:
"Stop Messaging Threats to Improve Business Productivity"
to
"Stop Business Productivity to Improve Messaging Threats"
;-)
Looks like it is from Sony (assuming it is not forged)...
I captured this from the mail header:
from mail pickup service by tracydc14.psp.com with Microsoft SMTPSVC; Tue, 7 Nov 2006 08:15:18 -0700
I checked psp.com in whois:
Registrant:
Sony Computer Entertainment Europe 25 Golden Square
London London W1F 9LU UK
Domain name: psp.com
Created on: 1996-11-05 Expires on: 2007-11-04
Administrative contact: Sony Webmaster 30 Golden Square
London W1F 9LD UK +44 20 7859 5000
domainadmin@scee.net
Technical contact: Role Netnames Hostmaster 3rd Floor Prospero House 241 Borough High St. London SE1 1GA UK +44 (0)20 7015 9370 +44 (0)20 7015 9375 hostmaster@netnames.net
Domain name servers:
cetcdns001.online.scee.com 217.18.19.184 cetcdns002.online.scee.com 217.18.19.185 cetcdns003.online.scee.com 217.18.16.223
Another domain in the headers: peaksystemperformance.com Registrant: Richard Tracy (rtracy5@columbus.rr.com) Peak System Performance 5600 Emerson Ave Worthington, OH 43085 US 614-846-0260 Domain Name: peaksystemperformance.com Administrative, Technical, Billing Contact: Richard Tracy (rtracy5@columbus.rr.com) Peak System Performance 5600 Emerson Ave Worthington, OH 43085 US 614-846-0260 Record created on Jan 20 2003. Record expires on Jan 20 2007. Domain servers: ns2.no-ip.com ns1.no-ip.com ns3.no-ip.com Please go [re-]configure! -- Geir A. Myrestrand
* Daniel Bauer
Just received the message below.
It seems to refer to a message I have sent to this list. There is no real "from"...
Anybody knows what this is?
Daniel ---------- Forwarded Message ----------
Subject: Antigen Notification: Antigen found a message matching a filter Date: Tuesday 07 November 2006 15:50 From: Antigen_TRACYDC14 To: linux@daniel-bauer.com
Microsoft Antigen for Exchange found a message matching a filter. The message is currently Purged. Message: "Re_ _SLE_ Thunderbird _ Printing to File" Filter name: "KEYWORD= spam: xxx " Sent from: "Daniel Bauer " Folder: "SMTP Messages\Inbound" Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"
According to google, antigen is a m$ anti-virii/spam filter for exchange, and m$ says that your post is virii/spam. And we all _respect_ m$'s opinii (TM!) -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/gallery2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Tuesday 2006-11-07 at 16:02 +0100, Daniel Bauer wrote:
Just received the message below.
Its a broken mail filter from Microsoft. Who else?
It seems to refer to a message I have sent to this list. There is no real "from"...
It is in the return path. And it usually has an attachment (Message.eml), containing the email that it was rejected, complete with headers (fortunately). You have to look carefully in "view source" mode at the attachment, look for the headers section, and search carefully for something like this: | Return-Path: suse-linux-e-return-65074-clueless=stupid.com@suse.com Well, the user "clueless@stupid.com" is the one that has to be unsubscribed from the list. Inform the list owner, and send him the full email you got.
Filter name: "KEYWORD= spam: xxx "
That is the word that triggered the filter, "xxx". It is stupid because a) it is a mail list, you have to expect almost anything, and b) never bounce anything back. It is broken because it should have bounced to suse, not us - but even postfix is broken in that respect sometimes. It is supposedly used to protect employees from reading disgusting emails containing words like fuck you and pennis - I include them in order to see if I can trigger the filter ;-) - instead of protecting the outside world of bad language used by the employee ;-) - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFFUKhktTMYHG2NR9URAvTLAJ945FVtGE989YZnaK78i6P3ZQTbSQCaA9B9 bqbj72NekJBXZgDr2Cjjm/I= =8v80 -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Tuesday 2006-11-07 at 16:38 +0100, I:
It is supposedly used to protect employees from reading disgusting emails containing words like fuck you and pennis - I include them in order to see if I can trigger the filter ;-) - instead of protecting the outside world of bad language used by the employee ;-)
Yeap, I got one! X-)
| Filter name: "KEYWORD= profanity: fuck;spam: xxx "
| Sent from: "Carlos E. R."
| Folder: "SMTP Messages\Inbound"
| Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"
Unfortunately, it does not contain the attachment, I can't track the
subscriber :-(
The machine is:
Return-Path:
On Tuesday 07 November 2006 16:50, Carlos E. R. wrote:
The Tuesday 2006-11-07 at 16:38 +0100, I:
It is supposedly used to protect employees from reading disgusting emails containing words like fuck you and pennis - I include them in order to see if I can trigger the filter ;-) - instead of protecting the outside world of bad language used by the employee ;-)
Yeap, I got one! X-)
| Filter name: "KEYWORD= profanity: fuck;spam: xxx " [..]
Then my mail was probably filtered out because it was dealing about Thunderbird instead of Outlook Express, the very latest mail client to be used on MS approved Suse :-)) (Sorry, couldn't resist) But in fact, as it says: Filter name: "KEYWORD= spam: xxx " it must have been the "xxx" in the quote "...If I don't give it an extension or give extensions of 'doc', 'lst', xxx'..." What a stupid filter! M$ at it's best, as it lives and breathes! :P Daniel -- Daniel Bauer photographer Basel Switzerland professional photography: http://www.daniel-bauer.com Madagascar special: http://www.sanic.ch
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Tuesday 2006-11-07 at 17:04 +0100, Daniel Bauer wrote:
Yeap, I got one! X-)
| Filter name: "KEYWORD= profanity: fuck;spam: xxx " [..]
Then my mail was probably filtered out because it was dealing about Thunderbird instead of Outlook Express, the very latest mail client to be used on MS approved Suse :-))
(Sorry, couldn't resist)
X-)
But in fact, as it says: Filter name: "KEYWORD= spam: xxx " it must have been the "xxx" in the quote "...If I don't give it an extension or give extensions of 'doc', 'lst', xxx'..."
Yes, that's what I thought.
What a stupid filter! M$ at it's best, as it lives and breathes! :P
Yep. It doesn't even use a score method, or context. Anyway, he is already unsubscribed, whoever he was. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFFULGxtTMYHG2NR9URAmmwAKCJLK++XWf7LkvepkyjFgs/3qNOHgCfTty0 2DcikEP+Bka7eH7yWPwaBzo= =tdop -----END PGP SIGNATURE-----
On Tue, 2006-11-07 at 16:02 +0100, Daniel Bauer wrote:
Just received the message below.
It seems to refer to a message I have sent to this list. There is no real "from"...
Anybody knows what this is?
Daniel ---------- Forwarded Message ----------
Subject: Antigen Notification: Antigen found a message matching a filter Date: Tuesday 07 November 2006 15:50 From: Antigen_TRACYDC14 To: linux@daniel-bauer.com
Microsoft Antigen for Exchange found a message matching a filter. The message is currently Purged. Message: "Re_ _SLE_ Thunderbird _ Printing to File" Filter name: "KEYWORD= spam: xxx " Sent from: "Daniel Bauer " Folder: "SMTP Messages\Inbound" Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"
-------------------------------------------------------
Some one reading this list seems to have a "filter" running. I've gotten an few of these protesting certain words that were in an article that were quoted by me.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Thursday 2006-11-09 at 19:45 -0500, Mike McMullin wrote:
Some one reading this list seems to have a "filter" running. I've gotten an few of these protesting certain words that were in an article that were quoted by me.
Are you still getting them? The user responsible was unsubscribed days ago. If you are getting them now, forward one of them complete with whole headers to the list owner. - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFFU9p7tTMYHG2NR9URAlnIAJ9RPce1mmDsYeRW8XhKuEQm8e25hgCggtI6 FAAHy/G83XtWMPliXj899jo= =qbPs -----END PGP SIGNATURE-----
participants (6)
-
Basil Chupin -
Carlos E. R. -
Daniel Bauer -
Geir A. Myrestrand -
Mike McMullin -
Patrick Shanahan