Login   |    ITaP Main > E-mail

 

What do I do with spam that made it through the scanner?

Messages that you believe to be spam can be sent to

is-spam@purdue.edu

so that we may forward it on to the vendor.  Please note that messages sent to is-spam must meet the following criteria:

  1. The message must be sent as an attachment in order to preserve the full headers. (Webmail and Outlook users, please see the note below)
  2. The headers must include the line that begins with X-PerlMx-Spam.  Messages without this line would not have come through the spam scanner and are not eligible for submission to the vendor.
  3. Only one sample message per submission

If these criteria are not met, then the message will be discarded.  No responses are sent for submissions to is-spam@purdue.edu other than the automated response with information on how to send a spam sample.

 If you have a question about this or the spam scanning service in general, please read the rest of the Spam FAQs or send your question to puremessage-admin@purdue.edu.

 

Note:

Webmail users: Webmail does not have the ability to send a message as an attachment, so please Redirect the message as this will preserve the headers correctly.  Redirect is available while viewing the message.

Outlook users: Please do the following to ensure your sample is correctly formatted:

  1. Select Tools | Options... from the menu.
  2. Go to the Preferences tab.
  3. Click E-mail Options....
  4. Make sure Attach original message is selected under When forwarding a message.
  5. Open the spam message and click on Options before forwarding the message

 


Sample full headers:

Return-Path: <XXXXXXXXXX@XXXXX.com>
Received: from XXXXXXXXXX.itcs.purdue.edu (XXXXXXXXXX.itcs.purdue.edu [128.210.XX.XXX])
    by XXXXXXXXXX.itcs.purdue.edu (8.13.1/8.13.1) with ESMTP id kA1EjbAA022355
    for <XXXXX@XXXXXXXXXXXXXXXXXXXXXXXX>; Wed, 1 Nov 2006 09:45:37 -0500
Received: from XXXXXXXXXX.itcs.purdue.edu (XXXXXXXXXX.itcs.purdue.edu [128.210.XX.XXXX])
    by XXXXXXXXXX.itcs.purdue.edu (8.13.7/8.13.7/spamscan) with ESMTP id kA1Ejbop002536
    for <XXXXXXXXX@XXXXXXXXX>; Wed, 1 Nov 2006 09:45:37 -0500
Received: from XXXXXXXXXXX.XXXXXX.XXX (XXXXXXXXXXX.XXXXXX.XXX [XXX.XXX.XXX.XXX])
    by XXXXXXXXXX.itcs.purdue.edu (8.13.7/8.13.7/external-smtp) with ESMTP id kA1EjbMS026580
    for <XXXX@XXXXX.XXX>; Wed, 1 Nov 2006 09:45:37 -0500
Received: by XXXXXXXXXXX.google.com with SMTP id p76so103217pyb
        for <XXXX@XXXXX.XXX>; Wed, 01 Nov 2006 06:45:37 -0800 (PST)
Received: by 10.35.37.13 with SMTP id p13mr8932285pyj;
        Wed, 01 Nov 2006 06:19:47 -0800 (PST)
Received: by 10.35.15.9 with HTTP; Wed, 1 Nov 2006 06:19:47 -0800 (PST)
Message-ID: <820356b80611010619u7feb7ebvd7302af3307d9e79@mail.gmail.com>
Date: Wed, 1 Nov 2006 09:19:47 -0500
From: <XXXXXX@XXXXXX.XXX>
To: raf@purdue.edu
Subject: test
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-PMX-Version: 5.2.1.279297, Antispam-Engine: 2.4.0.264935, Antispam-Data: 2006.11.1.62933
X-PMX-Version: 5.1.2.240295
X-PerlMx-Virus-Scanned: Yes
X-PerlMx-Spam: Gauge=IIIIIII, Probability=7%, Report='__CD 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0,  __HAS_MSGID 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __SANE_MSGID 0'