Mailing List Archive: Are these valid email headers?

Are these valid email headers?

Dec 5, 2020, 11:30 AM

Post #1 of 5 (933 views)

I don't have a Faceboox account and don't know anyone on Facebook that would
send me mail (and don't want to!), so I have absolutely no idea if these
headers from recent spams are completely made up out of the air (and thus
spam signs) or are valid headers.

Can anyone tell me if this stuff is valid or obviously fake?

X-Facebook: from 2401:db00:1050:208b:face:0:4f:0 ([MTI3LjAuMC4x])
by www.facebook.com with HTTPS (ZuckMail);
X-Priority: 3
X-Mailer: ZuckMail [version 1.00]
X-Facebook-Notify: skipped_password_change;
mailid=5ac39662d1c08G5af32c89e396G5ac39afc31edaG569
Feedback-ID: 509:skipped_password_change:Facebook
X-FACEBOOK-PRIORITY: 0
X-Auto-Response-Suppress: All
Require-Recipient-Valid-Since: gouldingc@earthlink.net; Sunday, 29 Nov 2009
00:17:08 +0000

Thanks,

Loren

Re: Are these valid email headers? [ In reply to ]

apache at irbs

Dec 5, 2020, 12:03 PM

Post #2 of 5 (933 views)

Permalink

On Sat, December 5, 2020 14:30, Loren Wilton wrote:
> I don't have a Faceboox account and don't know anyone on Facebook that would
> send me mail (and don't want to!), so I have absolutely no idea if these headers from recent spams
> are completely made up out of the air (and thus spam signs) or are valid headers.
>
> Can anyone tell me if this stuff is valid or obviously fake?
>
>
> X-Facebook: from 2401:db00:1050:208b:face:0:4f:0 ([MTI3LjAuMC4x])
> by www.facebook.com with HTTPS (ZuckMail); X-Priority: 3
> X-Mailer: ZuckMail [version 1.00]
> X-Facebook-Notify: skipped_password_change;
> mailid=5ac39662d1c08G5af32c89e396G5ac39afc31edaG569 Feedback-ID:
> 509:skipped_password_change:Facebook
> X-FACEBOOK-PRIORITY: 0
> X-Auto-Response-Suppress: All
> Require-Recipient-Valid-Since: gouldingc@earthlink.net; Sunday, 29 Nov 2009
> 00:17:08 +0000

Except for mailid: I see those headers in mail from Facebook.

Anyone can add Facebook headers to a message.

John Capo

Re: Are these valid email headers? [ In reply to ]

me at junc

Dec 5, 2020, 12:19 PM

Post #3 of 5 (933 views)

Permalink

Loren Wilton skrev den 2020-12-05 20:30:
> I don't have a Faceboox account and don't know anyone on Facebook that
> would send me mail (and don't want to!), so I have absolutely no idea
> if these headers from recent spams are completely made up out of the
> air (and thus spam signs) or are valid headers.
>
> Can anyone tell me if this stuff is valid or obviously fake?

facebook mails is dkim signed, if its not, reject it

but it seems one try to change passwords confirms ?

if its not your self, do nothing but change passord on the valid
homepage of facebook login, add twopass password secureity via FIDO usb
key or equant

Re: Are these valid email headers? [ In reply to ]

kremels at kreme

Dec 5, 2020, 10:42 PM

Post #4 of 5 (932 views)

Permalink

On 05 Dec 2020, at 13:03, John Capo <apache@irbs.com> wrote:
> On Sat, December 5, 2020 14:30, Loren Wilton wrote:
>> I don't have a Faceboox account and don't know anyone on Facebook that would
>> send me mail (and don't want to!), so I have absolutely no idea if these headers from recent spams
>> are completely made up out of the air (and thus spam signs) or are valid headers.
>>
>> Can anyone tell me if this stuff is valid or obviously fake?
>>
>>
>> X-Facebook: from 2401:db00:1050:208b:face:0:4f:0 ([MTI3LjAuMC4x])
>> by www.facebook.com with HTTPS (ZuckMail); X-Priority: 3
>> X-Mailer: ZuckMail [version 1.00]
>> X-Facebook-Notify: skipped_password_change;
>> mailid=5ac39662d1c08G5af32c89e396G5ac39afc31edaG569 Feedback-ID:
>> 509:skipped_password_change:Facebook
>> X-FACEBOOK-PRIORITY: 0
>> X-Auto-Response-Suppress: All
>> Require-Recipient-Valid-Since: gouldingc@earthlink.net; Sunday, 29 Nov 2009
>> 00:17:08 +0000
>
> Except for mailid: I see those headers in mail from Facebook.

Yeah, I use X-Facebook to auto-junk mail to me. For me it is 100% spam sign, but then again I refuse to use Facebook.

--
You have severe reading comprehension problems that I can not be held
responsible for.

RE: Are these valid email headers? [ In reply to ]

M.Roos at f1-outsourcing

Dec 6, 2020, 2:56 AM

Post #5 of 5 (931 views)

Permalink

>> with HTTPS (ZuckMail)

WTF this guy is mental

https://www.zerohedge.com/news/2018-03-25/dumb-f-ks-julian-assange-reminds-us-what-mark-zuckerberg-thinks-facebook-users

-----Original Message-----
From: @lbutlr [mailto:kremels@kreme.com]
Sent: zondag 6 december 2020 7:42
To: users@spamassassin.apache.org
Subject: Re: Are these valid email headers?

On 05 Dec 2020, at 13:03, John Capo <apache@irbs.com> wrote:
> On Sat, December 5, 2020 14:30, Loren Wilton wrote:
>> I don't have a Faceboox account and don't know anyone on Facebook
>> that would send me mail (and don't want to!), so I have absolutely no

>> idea if these headers from recent spams are completely made up out of
the air (and thus spam signs) or are valid headers.
>>
>> Can anyone tell me if this stuff is valid or obviously fake?
>>
>>
>> X-Facebook: from 2401:db00:1050:208b:face:0:4f:0 ([MTI3LjAuMC4x]) by
>> www.facebook.com with HTTPS (ZuckMail); X-Priority: 3
>> X-Mailer: ZuckMail [version 1.00]
>> X-Facebook-Notify: skipped_password_change;
>> mailid=5ac39662d1c08G5af32c89e396G5ac39afc31edaG569 Feedback-ID:
>> 509:skipped_password_change:Facebook
>> X-FACEBOOK-PRIORITY: 0
>> X-Auto-Response-Suppress: All
>> Require-Recipient-Valid-Since: gouldingc@earthlink.net; Sunday, 29
>> Nov 2009
>> 00:17:08 +0000
>
> Except for mailid: I see those headers in mail from Facebook.

Yeah, I use X-Facebook to auto-junk mail to me. For me it is 100% spam
sign, but then again I refuse to use Facebook.

--
You have severe reading comprehension problems that I can not be held
responsible for.