Print Page | Close Window

E-mail seen as "Empty Mail From" although sender exists

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=4536
Printed Date: 02 May 2025 at 10:36am


Topic: E-mail seen as "Empty Mail From" although sender exists
Posted By: mikek
Subject: E-mail seen as "Empty Mail From" although sender exists
Date Posted: 09 November 2004 at 7:35am

I've seen a few E-Mails getting marked as Spam because of an emtpy sender field, althuogh the sender field is not empty at all.

Here's the log of one of these mails:

11.09.04 12:00:18:586 -- (3068) Connection from: 195.186.1.207  -  Originating country : Switzerland
11.09.04 12:00:18:649 -- (3068) Resolving 195.186.1.207 - mail5.bluewin.ch
11.09.04 12:00:18:649 -- (3068) - Empty Mail From -
11.09.04 12:00:18:649 -- (3068) 195.186.1.207 - Mail from:  To: mailto:mike.kellenberger@escapenet.ch" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - mike.kellenberger@escapenet.ch will be spam-tagged
11.09.04 12:00:18:711 -- (3068) EMail from  to mailto:mike.kellenberger@escapenet.ch" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - mike.kellenberger@escapenet.ch was queued. Size: 1 KB, 1024 bytes
11.09.04 12:00:18:711 -- (652) Sending email from mailto:webmaster@escapenet.ch" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - webmaster@escapenet.ch to mailto:mike.kellenberger@escapenet.ch" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - mike.kellenberger@escapenet.ch
11.09.04 12:00:18:758 -- (2116) Time to add Msg to Bayes corpus:0
11.09.04 12:00:18:883 -- (652) EMail from mailto:webmaster@escapenet.ch" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - webmaster@escapenet.ch to mailto:mike.kellenberger@escapenet.ch" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - mike.kellenberger@escapenet.ch   was forwarded to beta.escapenet.ch:25
11.09.04 12:00:33:305 -- (3068) Disconnect

The funny thing is, that when sending, suddenly the sender is recognized.

I'm using 2.1.1.385

[Update]
Just noticed that this happens with E-Mails sent to mailto:mike.kellenberger@bluewin.ch" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - mike.kellenberger@bluewin.ch which are automatically redirected to mailto:mike.kellenberger@escapenet.ch" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - mike.kellenberger@escapenet.ch .

Cheers, Mike


Replies:
Posted By: LogSat
Date Posted: 09 November 2004 at 6:00pm
Mike,

The "MAIL FROM" SMTP command parameter is different than the "From" header in an email message. When SpamFilter reports an "Empty Mail From" in the log, it means that the MAIL FROM command did not contain an email address. Later, when the email is actually received, SpamFilter will read the email headers and attempt to retrieve the "From" header to report an address. If you are filtering for emails with empty "MAIL FROM", this behavior is correct.

Roberto F. LogSat Software


Print Page | Close Window