Body=1 with no Fuz1 or Fuz2

Gary Mills
Fri Jan 26 17:54:27 UTC 2007

I had a complaint from a user that obvious spam was getting through
to her.  It has an X-DCC header like this:

	X-DCC-UofM-Metrics: electra 1032; Body=1

When I checked the DCC log, it was a typical multipart/alternative
MIME message with a text/plain and a text/html portion.  Why would
there be no Fuz1 and Fuz2 checksums in this case?  Could they be
using funny MIME headers?  Here's how they look:

	Message-ID: <>
	Date: Sun, 21 Jan 2007 03:09:36 -0500 (EST)
	Mime-Version: 1.0
	Content-Type: multipart/alternative; boundary="=_UtK6uXq4A5Yci58jSK72cg"
	Content-Type: text/plain; charset=us-ascii
	Content-Transfer-Encoding: 8bit
	Content-Disposition: inline
	Content-Type: text/html; charset=us-ascii;
	Content-Transfer-Encoding: 8bit
	Content-Disposition: inline

Here are the checksums:

X-DCC-UofM-Metrics: electra 1032; Body=1
                            reported: 1               checksum  server
                       IP: 82f96651 d907165a 7ecbbfae cc048d8d
                 env_From: 115ef1eb 8ef5ea31 23913209 f95ef84c
                     From: f9db32b5 6fdac68a 66500ee0 f835b8f3
          substitute helo: ac6d0199 17f74635 a0d1001d 1f22c5ad
               Message-ID: 0b4558fe 97b01582 da9d9685 79bbb28a
                 Received: 7f6fa296 bb9146a3 46eee885 e6842970
                     Body: b87c87e2 d34fc325 9dffc846 c15ce291       0
     substitute mail_host: b1683191 17cfcaad e7ae7aba afef82dd

I can send the entire DCC log of this and similar messages, if that
will help.

-Gary Mills-    -Unix Support-    -U of M Academic Computing and Networking-

More information about the DCC mailing list

Contact by mail or use the form.