[RFCI-Discuss] abuse@qwest.net removing attachments

csmailreport csmailreport at googlemail.com
Mon May 1 14:24:26 EDT 2006


The Abuse Reporting Format being drafted at http://www.mipassoc.org/arf/
is a MIME report (message/feedback-report)

Also, considering that abuse desks always insist on getting full email
headers,
and that this operation is usually performed by "forwarding as attachment"
the original spam,
abuse destinations should accept at the very least message/rfc822
attachments,
including the original spam embedded, which in turns might have its own MIME
structure.

Stock spam has gone graphical recently to evade bayesian filters; the entire
message is
contained inside a GIF image, so this evidence is needed to get the full
picture.

How can you demonstrate it is spam if you insist on getting the original
email but without its embedded MIME elements ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.megacity.org/pipermail/rfci-discuss/attachments/20060501/4a1ddb9d/attachment.html


More information about the RFCI-Discuss mailing list