What's this: Antigen Notification... ?

classic Classic list List threaded Threaded
13 messages Options
Reply | Threaded
Open this post in threaded view
|

What's this: Antigen Notification... ?

Daniel Bauer
Just received the message below.

It seems to refer to a message I have sent to this list. There is no
real "from"...

Anybody knows what this is?

Daniel
----------  Forwarded Message  ----------

Subject: Antigen Notification: Antigen found a message matching a filter
Date: Tuesday 07 November 2006 15:50
From: Antigen_TRACYDC14
To: [hidden email]

Microsoft Antigen for Exchange found a message matching a filter. The message
 is currently Purged. Message: "Re_ _SLE_ Thunderbird  _ Printing to File"
Filter name: "KEYWORD= spam: xxx "
Sent from: "Daniel Bauer "
Folder: "SMTP Messages\Inbound"
Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"

-------------------------------------------------------

--
Daniel Bauer photographer Basel Switzerland
professional photography: http://www.daniel-bauer.com
Madagascar special: http://www.sanic.ch

Microsoft Antigen for Exchange found a message matching a filter. The message is currently Purged.
Message: "Re_ _SLE_ Thunderbird  _ Printing to File"
Filter name: "KEYWORD= spam: xxx "
Sent from: "Daniel Bauer "
Folder: "SMTP Messages\Inbound"
Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"




--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Geir A. Myrestrand
Daniel Bauer wrote:

> Just received the message below.
>
> It seems to refer to a message I have sent to this list. There is no
> real "from"...
>
> Anybody knows what this is?
>
> Daniel
> ----------  Forwarded Message  ----------
>
> Subject: Antigen Notification: Antigen found a message matching a filter
> Date: Tuesday 07 November 2006 15:50
> From: Antigen_TRACYDC14
> To: [hidden email]
>
> Microsoft Antigen for Exchange found a message matching a filter. The message
>  is currently Purged. Message: "Re_ _SLE_ Thunderbird  _ Printing to File"
> Filter name: "KEYWORD= spam: xxx "
> Sent from: "Daniel Bauer "
> Folder: "SMTP Messages\Inbound"
> Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"
>

Looks like a message from Sybari's Antigen for Microsoft Exchange:
http://www.sybari.com/portal/alias__Rainbow/lang__en-US/tabID__3345/DesktopDefault.aspx

Maybe they should change the slogan from:

"Stop Messaging Threats to Improve Business Productivity"

to

"Stop Business Productivity to Improve Messaging Threats"

;-)


--

Geir A. Myrestrand

--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Basil Chupin
In reply to this post by Daniel Bauer
Daniel Bauer wrote:

> Just received the message below.
>
> It seems to refer to a message I have sent to this list. There is no
> real "from"...
>
> Anybody knows what this is?
>
> Daniel
> ----------  Forwarded Message  ----------
>
> Subject: Antigen Notification: Antigen found a message matching a filter
> Date: Tuesday 07 November 2006 15:50
> From: Antigen_TRACYDC14
> To: [hidden email]
>
> Microsoft Antigen for Exchange found a message matching a filter. The message
>  is currently Purged. Message: "Re_ _SLE_ Thunderbird  _ Printing to File"
> Filter name: "KEYWORD= spam: xxx "
> Sent from: "Daniel Bauer "
> Folder: "SMTP Messages\Inbound"
> Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"

[pruned]


Ah, you got one as well :-) . Same topic, same addressee.

Ah, M$... crap one day, pure rubbish the next! :-)

Cheers.


--
"If the terrier and the bariffs are torn down, this economy will grow."

                                         George W. Bush  January 2000


--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Patrick Shanahan
In reply to this post by Daniel Bauer
* Daniel Bauer <[hidden email]> [11-07-06 10:05]:

> Just received the message below.
>
> It seems to refer to a message I have sent to this list. There is no
> real "from"...
>
> Anybody knows what this is?
>
> Daniel
> ----------  Forwarded Message  ----------
>
> Subject: Antigen Notification: Antigen found a message matching a filter
> Date: Tuesday 07 November 2006 15:50
> From: Antigen_TRACYDC14
> To: [hidden email]
>
> Microsoft Antigen for Exchange found a message matching a filter. The message
>  is currently Purged. Message: "Re_ _SLE_ Thunderbird  _ Printing to File"
> Filter name: "KEYWORD= spam: xxx "
> Sent from: "Daniel Bauer "
> Folder: "SMTP Messages\Inbound"
> Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"

According to google, antigen is a m$ anti-virii/spam filter for
exchange, and m$ says that your post is virii/spam.  

And we all _respect_ m$'s opinii (TM!)

--
Patrick Shanahan                        Registered Linux User #207535
http://wahoo.no-ip.org                        @ http://counter.li.org
HOG # US1244711         Photo Album:  http://wahoo.no-ip.org/gallery2

--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Geir A. Myrestrand
In reply to this post by Geir A. Myrestrand
Geir A. Myrestrand wrote:

> Daniel Bauer wrote:
>> Just received the message below.
>>
>> It seems to refer to a message I have sent to this list. There is no
>> real "from"...
>>
>> Anybody knows what this is?
>>
>> Daniel
>> ----------  Forwarded Message  ----------
>>
>> Subject: Antigen Notification: Antigen found a message matching a filter
>> Date: Tuesday 07 November 2006 15:50
>> From: Antigen_TRACYDC14
>> To: [hidden email]
>>
>> Microsoft Antigen for Exchange found a message matching a filter. The
>> message
>>  is currently Purged. Message: "Re_ _SLE_ Thunderbird  _ Printing to
>> File"
>> Filter name: "KEYWORD= spam: xxx "
>> Sent from: "Daniel Bauer "
>> Folder: "SMTP Messages\Inbound"
>> Location: "peaksystemperformance.com/First Administrative
>> Group/TRACYDC14"
>>
>
> Looks like a message from Sybari's Antigen for Microsoft Exchange:
> http://www.sybari.com/portal/alias__Rainbow/lang__en-US/tabID__3345/DesktopDefault.aspx 
>
>
> Maybe they should change the slogan from:
>
> "Stop Messaging Threats to Improve Business Productivity"
>
> to
>
> "Stop Business Productivity to Improve Messaging Threats"
>
> ;-)

Looks like it is from Sony (assuming it is not forged)...

I captured this from the mail header:

from mail pickup service by tracydc14.psp.com with Microsoft SMTPSVC;
Tue, 7 Nov 2006 08:15:18 -0700

I checked psp.com in whois:

Registrant:

   Sony Computer Entertainment Europe
   25 Golden Square

   London London
   W1F 9LU
   UK

Domain name: psp.com

   Created on: 1996-11-05
   Expires on: 2007-11-04


Administrative contact:
   Sony Webmaster
   30 Golden Square

   London
   W1F 9LD
   UK
   +44 20 7859 5000

   [hidden email]


Technical contact:
   Role Netnames Hostmaster
   3rd Floor Prospero House
   241 Borough High St.
   London
   SE1 1GA
   UK
   +44 (0)20 7015 9370
   +44 (0)20 7015 9375
   [hidden email]


Domain name servers:

   cetcdns001.online.scee.com  217.18.19.184
   cetcdns002.online.scee.com  217.18.19.185
   cetcdns003.online.scee.com  217.18.16.223

--

Geir A. Myrestrand

--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Geir A. Myrestrand
Geir A. Myrestrand wrote:

> Geir A. Myrestrand wrote:
>> Daniel Bauer wrote:
>>> Just received the message below.
>>>
>>> It seems to refer to a message I have sent to this list. There is no
>>> real "from"...
>>>
>>> Anybody knows what this is?
>>>
>>> Daniel
>>> ----------  Forwarded Message  ----------
>>>
>>> Subject: Antigen Notification: Antigen found a message matching a filter
>>> Date: Tuesday 07 November 2006 15:50
>>> From: Antigen_TRACYDC14
>>> To: [hidden email]
>>>
>>> Microsoft Antigen for Exchange found a message matching a filter. The
>>> message
>>>  is currently Purged. Message: "Re_ _SLE_ Thunderbird  _ Printing to
>>> File"
>>> Filter name: "KEYWORD= spam: xxx "
>>> Sent from: "Daniel Bauer "
>>> Folder: "SMTP Messages\Inbound"
>>> Location: "peaksystemperformance.com/First Administrative
>>> Group/TRACYDC14"
>>>
>>
>> Looks like a message from Sybari's Antigen for Microsoft Exchange:
>> http://www.sybari.com/portal/alias__Rainbow/lang__en-US/tabID__3345/DesktopDefault.aspx 
>>
>>
>> Maybe they should change the slogan from:
>>
>> "Stop Messaging Threats to Improve Business Productivity"
>>
>> to
>>
>> "Stop Business Productivity to Improve Messaging Threats"
>>
>> ;-)
>
> Looks like it is from Sony (assuming it is not forged)...
>
> I captured this from the mail header:
>
> from mail pickup service by tracydc14.psp.com with Microsoft
> SMTPSVC;     Tue, 7 Nov 2006 08:15:18 -0700
>
> I checked psp.com in whois:
>
> Registrant:
>
>   Sony Computer Entertainment Europe
>   25 Golden Square
>
>   London London
>   W1F 9LU
>   UK
>
> Domain name: psp.com
>
>   Created on: 1996-11-05
>   Expires on: 2007-11-04
>
>
> Administrative contact:
>   Sony Webmaster
>   30 Golden Square
>
>   London
>   W1F 9LD
>   UK
>   +44 20 7859 5000
>
>   [hidden email]
>
>
> Technical contact:
>   Role Netnames Hostmaster
>   3rd Floor Prospero House
>   241 Borough High St.
>   London
>   SE1 1GA
>   UK
>   +44 (0)20 7015 9370
>   +44 (0)20 7015 9375
>   [hidden email]
>
>
> Domain name servers:
>
>   cetcdns001.online.scee.com  217.18.19.184
>   cetcdns002.online.scee.com  217.18.19.185
>   cetcdns003.online.scee.com  217.18.16.223
>

Another domain in the headers:

peaksystemperformance.com

Registrant:
          Richard Tracy  ([hidden email])
         Peak System Performance
         5600 Emerson Ave
         Worthington, OH  43085
         US
         614-846-0260


Domain Name: peaksystemperformance.com




Administrative, Technical, Billing Contact:
          Richard Tracy  ([hidden email])
         Peak System Performance
         5600 Emerson Ave
         Worthington, OH  43085
         US
         614-846-0260


       


    Record created on Jan 20 2003.
    Record expires on Jan 20 2007.
Domain servers:
         ns2.no-ip.com
         ns1.no-ip.com
         ns3.no-ip.com



Please go [re-]configure!

--

Geir A. Myrestrand

--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Carlos E. R.-2
In reply to this post by Daniel Bauer
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


The Tuesday 2006-11-07 at 16:02 +0100, Daniel Bauer wrote:

> Just received the message below.

Its a broken mail filter from Microsoft. Who else?

> It seems to refer to a message I have sent to this list. There is no
> real "from"...

It is in the return path.

And it usually has an attachment (Message.eml), containing the email that
it was rejected, complete with headers (fortunately). You have to look
carefully in "view source" mode at the attachment, look for the headers
section, and search carefully for something like this:

| Return-Path: suse-linux-e-return-65074-clueless=[hidden email]

Well, the user "[hidden email]" is the one that has to be
unsubscribed from the list. Inform the list owner, and send him the full
email you got.


> Filter name: "KEYWORD= spam: xxx "

That is the word that triggered the filter, "xxx". It is stupid because a)
it is a mail list, you have to expect almost anything, and b) never
bounce anything back. It is broken because it should have bounced to suse,
not us - but even postfix is broken in that respect sometimes.

It is supposedly used to protect employees from reading disgusting emails
containing words like fuck you and pennis - I include them in order to see
if I can trigger the filter ;-) - instead of protecting the outside world
of bad language used by the employee ;-)

- --
Cheers,
       Carlos E. R.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFFUKhktTMYHG2NR9URAvTLAJ945FVtGE989YZnaK78i6P3ZQTbSQCaA9B9
bqbj72NekJBXZgDr2Cjjm/I=
=8v80
-----END PGP SIGNATURE-----


--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Carlos E. R.-2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


The Tuesday 2006-11-07 at 16:38 +0100, I:

> It is supposedly used to protect employees from reading disgusting emails
> containing words like fuck you and pennis - I include them in order to see
> if I can trigger the filter ;-) - instead of protecting the outside world
> of bad language used by the employee ;-)

Yeap, I got one! X-)

| Filter name: "KEYWORD= profanity: fuck;spam: xxx "
| Sent from: "Carlos E. R."
| Folder: "SMTP Messages\Inbound"
| Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"


Unfortunately, it does not contain the attachment, I can't track the
subscriber :-(

The machine is:

Return-Path: <[hidden email]>

Received: from tracydc14.psp.com (67-41-152-162.hlrn.qwest.net [67.41.152.162])
        (Authenticated sender: peaksystemperformance.com@noip-smtp)
        by smtp-auth.no-ip.com (Postfix) with ESMTP id 55A9ABF11
        for <robin.listas@>; Tue,  7 Nov 2006 07:39:04 -0800 (PST)


So, I think the list admin can possible search the subscriber list to find
someone in peaksystemperformance.com or tracydc14.psp.com (homefully!) and
unsubscribe him.


- --
Cheers,
       Carlos E. R.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFFUKs+tTMYHG2NR9URAi6DAJ0WweHNKM9jcdbeByTtadE2J84qhQCfbis8
OA28L667P+64DQFzAnviZlA=
=aGvq
-----END PGP SIGNATURE-----


--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Daniel Bauer
On Tuesday 07 November 2006 16:50, Carlos E. R. wrote:

> The Tuesday 2006-11-07 at 16:38 +0100, I:
> > It is supposedly used to protect employees from reading disgusting emails
> > containing words like fuck you and pennis - I include them in order to
> > see if I can trigger the filter ;-) - instead of protecting the outside
> > world of bad language used by the employee ;-)
>
> Yeap, I got one! X-)
>
> | Filter name: "KEYWORD= profanity: fuck;spam: xxx "
> [..]

Then my mail was probably filtered out because it was dealing about
Thunderbird instead of Outlook Express, the very latest mail client to be
used on MS approved Suse :-))

(Sorry, couldn't resist)

But in fact, as it says:
Filter name: "KEYWORD= spam: xxx "
it must have been the "xxx" in the quote
"...If I don't give it an extension or give extensions of 'doc', 'lst',
xxx'..."

What a stupid filter! M$ at it's best, as it lives and breathes! :P

Daniel
--
Daniel Bauer photographer Basel Switzerland
professional photography: http://www.daniel-bauer.com
Madagascar special: http://www.sanic.ch

--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Carlos E. R.-2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


The Tuesday 2006-11-07 at 17:04 +0100, Daniel Bauer wrote:

> > Yeap, I got one! X-)
> >
> > | Filter name: "KEYWORD= profanity: fuck;spam: xxx "
> > [..]
>
> Then my mail was probably filtered out because it was dealing about
> Thunderbird instead of Outlook Express, the very latest mail client to be
> used on MS approved Suse :-))
>
> (Sorry, couldn't resist)

X-)

>
> But in fact, as it says:
> Filter name: "KEYWORD= spam: xxx "
> it must have been the "xxx" in the quote
> "...If I don't give it an extension or give extensions of 'doc', 'lst',
> xxx'..."

Yes, that's what I thought.

>
> What a stupid filter! M$ at it's best, as it lives and breathes! :P

Yep. It doesn't even use a score method, or context.


Anyway, he is already unsubscribed, whoever he was.

- --
Cheers,
       Carlos E. R.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFFULGxtTMYHG2NR9URAmmwAKCJLK++XWf7LkvepkyjFgs/3qNOHgCfTty0
2DcikEP+Bka7eH7yWPwaBzo=
=tdop
-----END PGP SIGNATURE-----


--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Mike McMullin
In reply to this post by Daniel Bauer
On Tue, 2006-11-07 at 16:02 +0100, Daniel Bauer wrote:

> Just received the message below.
>
> It seems to refer to a message I have sent to this list. There is no
> real "from"...
>
> Anybody knows what this is?
>
> Daniel
> ----------  Forwarded Message  ----------
>
> Subject: Antigen Notification: Antigen found a message matching a filter
> Date: Tuesday 07 November 2006 15:50
> From: Antigen_TRACYDC14
> To: [hidden email]
>
> Microsoft Antigen for Exchange found a message matching a filter. The message
>  is currently Purged. Message: "Re_ _SLE_ Thunderbird  _ Printing to File"
> Filter name: "KEYWORD= spam: xxx "
> Sent from: "Daniel Bauer "
> Folder: "SMTP Messages\Inbound"
> Location: "peaksystemperformance.com/First Administrative Group/TRACYDC14"
>
> -------------------------------------------------------

  Some one reading this list seems to have a "filter" running.  I've
gotten an few of these protesting certain words that were in an article
that were quoted by me.


--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Mike McMullin
In reply to this post by Basil Chupin
On Wed, 2006-11-08 at 02:11 +1100, Basil Chupin wrote:

[pruned]


> Ah, you got one as well :-) . Same topic, same addressee.
>
> Ah, M$... crap one day, pure rubbish the next! :-)

  More like misconfigured software, if the use doesn't like the filtered
material, there is no sense telling the sender that s/he doesn't like
it, but to just bit bucket it.


--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]


Reply | Threaded
Open this post in threaded view
|

Re: What's this: Antigen Notification... ?

Carlos E. R.-2
In reply to this post by Mike McMullin
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


The Thursday 2006-11-09 at 19:45 -0500, Mike McMullin wrote:

>   Some one reading this list seems to have a "filter" running.  I've
> gotten an few of these protesting certain words that were in an article
> that were quoted by me.

Are you still getting them? The user responsible was unsubscribed days
ago. If you are getting them now, forward one of them complete with whole
headers to the list owner.

- --
Cheers,
       Carlos E. R.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFFU9p7tTMYHG2NR9URAlnIAJ9RPce1mmDsYeRW8XhKuEQm8e25hgCggtI6
FAAHy/G83XtWMPliXj899jo=
=qbPs
-----END PGP SIGNATURE-----


--
Check the headers for your unsubscription address
For additional commands send e-mail to [hidden email]
Also check the archives at http://lists.suse.com
Please read the FAQs: [hidden email]