Bad SMTP headers - 2nd try

Well, seems my poor choice of examples to send convinced everyone it was
a virus sending these messages. Here are some other thoughtfully-chosen
examples to dispel that myth:

@400000003bb47c8835951c14 delivery 292904: success:
Bad_RFC822_field_name_‘Akira_-Please_Change_The_Crontab_On_All_The_web
Hosts_To_Run_This_Daily’/at/opt/rt2/lib/RT/Template.pm_line_255/did_0+
0+1/

@400000003bb4ce40227cc604 delivery 293389: success:
Bad_RFC822_field_name_'Please_Qa_Tropicana’S_Flash_Banners._There_Are_T
wo_468x60_And_Two_120x600’/at/opt/rt2/lib/RT/Template.pm_line_255/did

0+0+1/

@400000003bb4f7f63494e254 delivery 293462: success:
Bad_RFC822_field_name_‘Please_Add_To_The_Nt_Queue_And_Assign_To_Andrew.’
/at/opt/rt2/lib/RT/Template.pm_line_255/did_0+0+1/

As you can see - these are not virus related. Now…anyone have any
thoughts?

-Phil Oester

I’d very much like to see what’s in the rt.log files for the processes
that generated these. Alternatively, feeding the messages to rt-mailgate by
hand in a shell will get you better errors too. I’m betting something
bogus in your templates.On Mon, Oct 01, 2001 at 07:28:39PM -0700, Phil Oester wrote:

Well, seems my poor choice of examples to send convinced everyone it was
a virus sending these messages. Here are some other thoughtfully-chosen
examples to dispel that myth:

@400000003bb47c8835951c14 delivery 292904: success:
Bad_RFC822_field_name_‘Akira_-Please_Change_The_Crontab_On_All_The_web
Hosts_To_Run_This_Daily’/at/opt/rt2/lib/RT/Template.pm_line_255/did_0+
0+1/

@400000003bb4ce40227cc604 delivery 293389: success:
Bad_RFC822_field_name_'Please_Qa_Tropicana’S_Flash_Banners._There_Are_T
wo_468x60_And_Two_120x600’/at/opt/rt2/lib/RT/Template.pm_line_255/did

0+0+1/

@400000003bb4f7f63494e254 delivery 293462: success:
Bad_RFC822_field_name_‘Please_Add_To_The_Nt_Queue_And_Assign_To_Andrew.’
/at/opt/rt2/lib/RT/Template.pm_line_255/did_0+0+1/

As you can see - these are not virus related. Now…anyone have any
thoughts?

-Phil Oester


rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users

http://www.bestpractical.com/products/rt – Trouble Ticketing. Free.

I’d very much like to see what’s in the rt.log files for the processes
that generated these. Alternatively, feeding the messages to rt-mailgate by
hand in a shell will get you better errors too. I’m betting something
bogus in your templates.

I experienced the same bad_RFC822_field_name message before.

IIRC, it was bad template-editing on my part.
I did not leave a blank line after the first Subject: line in some of the templates, probably during a caffeine-less configuration streak, and after fixing it I think the problem went away…

Well, investigated, and some of the templates didn’t have returns after
the subject. So…changed them, and will watch this to see if it
is…er…resolved.

Thanks,

-Phil OesterFrom: hsinclai@speakeasy.net [mailto:hsinclai@speakeasy.net]
Sent: Monday, October 01, 2001 7:46 PM
To: Jesse Vincent
Cc: Phil Oester; rt-users@lists.fsck.com
Subject: Re: [rt-users] Bad SMTP headers - 2nd try

I experienced the same bad_RFC822_field_name message before.

IIRC, it was bad template-editing on my part.
I did not leave a blank line after the first Subject: line in some of
the templates, probably during a caffeine-less configuration streak, and
after fixing it I think the problem went away…

I’d very much like to see what’s in the rt.log files for the processes
that generated these. Alternatively, feeding the messages to
rt-mailgate by
hand in a shell will get you better errors too. I’m betting something
bogus in your templates.

Well, seems my poor choice of examples to send convinced everyone it
was

a virus sending these messages. Here are some other
thoughtfully-chosen

examples to dispel that myth:

@400000003bb47c8835951c14 delivery 292904: success:

Bad_RFC822_field_name_'Akira_-Please_Change_The_Crontab_On_All_The_web

Hosts_To_Run_This_Daily’/at/opt/rt2/lib/RT/Template.pm_line_255/did_0+

0+1/

@400000003bb4ce40227cc604 delivery 293389: success:

Bad_RFC822_field_name_'Please_Qa_Tropicana’S_Flash_Banners.__There_Are_T

wo_468x60_And_Two_120x600’/at/opt/rt2/lib/RT/Template.pm_line_255/did_

0+0+1/

@400000003bb4f7f63494e254 delivery 293462: success:

Bad_RFC822_field_name_‘Please_Add_To_The_Nt_Queue_And_Assign_To_Andrew.’

/at/opt/rt2/lib/RT/Template.pm_line_255/did_0+0+1/

As you can see - these are not virus related. Now…anyone have any
thoughts?

-Phil Oester


rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users


http://www.bestpractical.com/products/rt – Trouble Ticketing. Free.


rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users