Beta
×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Subject: :) [smiley spam]

nacturation (646836) writes | more than 6 years ago

User Journal 2

What's up with the smiley spam I've been seeing lately? Anyone else run into emails where the subject contains only a smiley :) and there's nothing in the body? The email server implements greylisting (go spamd!), so the messages are being retried by the delivering system. Anyone know what the scoop is?

What's up with the smiley spam I've been seeing lately? Anyone else run into emails where the subject contains only a smiley :) and there's nothing in the body? The email server implements greylisting (go spamd!), so the messages are being retried by the delivering system. Anyone know what the scoop is?

Sorry! There are no comments related to the filter you selected.

A few... (1)

johndiii (229824) | more than 6 years ago | (#24180749)

I've gotten a few of those, but I didn't notice that the body was empty. For a while, I was getting a fair number of no subject/no body emails, but those seem to have stopped. The only thing that I can figure out is that they are address-validation probes. There does not seem to be any other point. Unless the spamming software has a bug in it. :-)

Re:A few... (1)

nacturation (646836) | more than 6 years ago | (#24181837)

Here's the headers from one this morning:

Received: from mjtygpd.telecomitalia.it (host137-251-dynamic.2-87-r.retail.telecomitalia.it [87.2.251.137])
        by ourdomain.com (Postfix) with SMTP id 38C0F812
        for ; Mon, 14 Jul 2008 02:46:17 -0700 (PDT)
Date: Mon, 14 Jul 2008 09:47:23 +0000
From: "Grybel Kaufmann"
X-Mailer: The Bat! (3.0.1.33) Professional
Reply-To: Grybel Kaufmann
X-Priority: 3 (Normal)
Message-ID:
To:
Subject: :)
MIME-Version: 1.0
Content-Type: multipart/alternative;
  boundary="----------28D948A6B14EB0"
Return-Path: wayworn@perfumania.com
X-OriginalArrivalTime: 14 Jul 2008 09:49:21.0093 (UTC) FILETIME=[3A018D7B:1832B6A9]

------------28D948A6B14EB0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

------------28D948A6B14EB0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

------------28D948A6B14EB0--

And the body:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html> <head> <title> </title>

Come to think of it, I only just noticed that it stops at </title> so I'm thinking your "bug in the spam software" theory is a likely candidate. :)

On a side note, I'm very tempted to block "X-Mailer: The Bat! ..." entirely, but there are apparently a few legitimate users who actually use that program.
 

Check for New Comments
Slashdot Login

Need an Account?

Forgot your password?