[Esd-l] Html-trap and received mail from yahoo.com

[Frank Hahn]

On Fri, May 17, 2002 at 07:02:23AM -0500, Frank Hahn wrote:
> I have the following:
> 
> html-trap.procmail version 1.128
> procmail version 3.15
> Sparc 20 running Solaris 2.6
> 
> I have started using a script called fetchyahoo.pl which I found at
> http://www.freshmeat.net to grab email from my yahoo.com account.  I
> believe the email is being run through the sanitizer but for some
> reason, it is not seeing programs that are included in this email.
> 
> For example, late last night, I received this (just the headers and a
> little more):
>
(The rest was snipped.)

Here is something that is interesting.  I received an email that went
into my spam filter because the email address is not in my whitelist.
It is in response to my first post today with the little bit of
headers that included information about the *.exe file.  Here it is:

---------------Start---------------------------------
>From ANTIGEN_JEWELS at exchange.montana.edu  Fri May 17 07:30:14 2002
Return-Path: <ANTIGEN_JEWELS at exchange.montana.edu>
Received: from localhost (localhost [127.0.0.1])
        by bart.fcjc.net (8.11.6/8.11.6) with ESMTP id g4HCUDE26232
        for <dfh at localhost>; Fri, 17 May 2002 07:30:13 -0500 (CDT)
Received: from mail.machlink.com
        by localhost with POP3 (fetchmail-5.2.0)
        for dfh at localhost (single-drop); Fri, 17 May 2002 07:30:13
-0500 (CDT)
Received: from JEWELS.msu.montana.edu (emerald.msu.montana.edu
[153.90.2.73])
        by server06.machlink.com (8.12.2/8.12.2) with ESMTP id
g4HBws1Q003385
        for <buckeye+htmltrap at machlink.com>; Fri, 17 May 2002 06:58:55
-0500 (CD
T)
Received: by emerald.msu.montana.edu with Internet Mail Service
(5.5.2653.19)
        id <KFR3GMN0>; Fri, 17 May 2002 06:01:29 -0600
Message-ID:
<95AC7052DE4A78488DCFB615F7A49EA403C83599 at emerald.msu.montana.edu>
From: ANTIGEN_JEWELS <ANTIGEN_JEWELS at exchange.montana.edu>
To: "'buckeye+htmltrap at machlink.com'" <buckeye+htmltrap at machlink.com>
Subject: Antigen found =*.exe file
Date: Fri, 17 May 2002 06:01:28 -0600
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-Type: text/plain
X-UIDL: "#$"!/D<"!#o)!!OfN!!

Antigen for Exchange found align.exe matching =*.exe file filter.
The file is currently Removed.  The message, "[Esd-l] Html-trap and
received
mail from yahoo.com", was
sent from Frank Hahn  and was discovered in IMC Queues\Inbound
located at Montana State University/MSU/JEWELS.
---------------End------------------------------

Line may not be wrapped properly.

-- 
Frank Hahn

Song Title of the Week:
	"They're putting dimes in the hole in my head to see the change
in me."