From odarla@amax.com  Mon Dec  1 13:55:33 2008
Return-Path: <odarla@amax.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id E4FFC28C11D
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon,  1 Dec 2008 13:55:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -28.827
X-Spam-Level: 
X-Spam-Status: No, score=-28.827 tagged_above=-999 required=5
	tests=[BAYES_50=0.001, HELO_DYNAMIC_HCC=4.295, HELO_EQ_DSL=1.129,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
	RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id AoJAL72y7aOc
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon,  1 Dec 2008 13:55:33 -0800 (PST)
Received: from 69.Red-80-33-223.staticIP.rima-tde.net (69.Red-80-33-223.staticIP.rima-tde.net [80.33.223.69])
	by core3.amsl.com (Postfix) with SMTP id 2F39B28C0FA
	for <syslog-archive@ietf.org>; Mon,  1 Dec 2008 13:55:27 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: RE: Message
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081201215530.2F39B28C0FA@core3.amsl.com>
Date: Mon,  1 Dec 2008 13:55:27 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://batcome.com/" target="_blank">
<img src="http://batcome.com/8dvs9.jpg" border=0 alt="Click here to view as a webpage."></a></BODY></HTML>


From lufstein@afip.gov.ar  Mon Dec  1 17:02:19 2008
Return-Path: <lufstein@afip.gov.ar>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 99AE63A6829
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon,  1 Dec 2008 17:02:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -35.214
X-Spam-Level: 
X-Spam-Status: No, score=-35.214 tagged_above=-999 required=5
	tests=[BAYES_50=0.001, FH_RELAY_NODNS=1.451, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_WEB=0.619,
	RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 6v3p0B4TEqdI
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon,  1 Dec 2008 17:02:19 -0800 (PST)
Received: from amschool.edu.sv (unknown [190.186.73.125])
	by core3.amsl.com (Postfix) with SMTP id A0CD53A635F
	for <syslog-archive@ietf.org>; Mon,  1 Dec 2008 17:02:12 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081202010214.A0CD53A635F@core3.amsl.com>
Date: Mon,  1 Dec 2008 17:02:12 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="http://weekmy.com/" target="_blank">
<img src="http://weekmy.com/8dvs9.jpg" border=0 alt="Click here to view as a webpage."></a></BODY></HTML>


From k_evans@ama-assn.org  Tue Dec  2 06:19:51 2008
Return-Path: <k_evans@ama-assn.org>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id BC7EA3A6A82
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue,  2 Dec 2008 06:19:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -19.75
X-Spam-Level: 
X-Spam-Status: No, score=-19.75 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_EQ_DE=0.35,
	HELO_MISMATCH_DE=1.448, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033,
	RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id DhdVHK61gvKG
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue,  2 Dec 2008 06:19:51 -0800 (PST)
Received: from andreas-buehl.de (unknown [88.247.34.118])
	by core3.amsl.com (Postfix) with SMTP id D24B43A6A48
	for <syslog-archive@ietf.org>; Tue,  2 Dec 2008 06:19:49 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: longevity can be bought
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081202141949.D24B43A6A48@core3.amsl.com>
Date: Tue,  2 Dec 2008 06:19:49 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://www.mehuqez.cn/" target="_blank">
<img src="http://www.mehuqez.cn/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From navarror@agri-fab.com  Tue Dec  2 13:07:56 2008
Return-Path: <navarror@agri-fab.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 19BF83A6BD5
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue,  2 Dec 2008 13:07:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -11.923
X-Spam-Level: 
X-Spam-Status: No, score=-11.923 tagged_above=-999 required=5
	tests=[BAYES_50=0.001, FH_RELAY_NODNS=1.451, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 1iVl463g4o+8
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue,  2 Dec 2008 13:07:56 -0800 (PST)
Received: from cpc2-ruth2-0-0-cust857.renf.cable.ntl.com (cpc2-ruth2-0-0-cust857.renf.cable.ntl.com [82.11.59.90])
	by core3.amsl.com (Postfix) with SMTP id F283F28C1EF
	for <syslog-archive@ietf.org>; Tue,  2 Dec 2008 13:07:49 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Re: Order status
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081202210750.F283F28C1EF@core3.amsl.com>
Date: Tue,  2 Dec 2008 13:07:49 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://catequate.com/" target="_blank">
<img src="http://catequate.com/8dvs9.jpg" border=0 alt="Click here to view as a webpage."></a></BODY></HTML>


From k.jung@allianz.de  Wed Dec  3 08:49:22 2008
Return-Path: <k.jung@allianz.de>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 453F93A6882
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed,  3 Dec 2008 08:49:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -33.261
X-Spam-Level: 
X-Spam-Status: No, score=-33.261 tagged_above=-999 required=5
	tests=[BAYES_50=0.001, HOST_EQ_BROADBND=1.118,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id FVMKNNCoOroV
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed,  3 Dec 2008 08:49:21 -0800 (PST)
Received: from host661461294a.biz.tor.fcibroadband.com (host661461294a.biz.tor.fcibroadband.com [66.146.129.74])
	by core3.amsl.com (Postfix) with SMTP id D60373A6886
	for <syslog-archive@ietf.org>; Wed,  3 Dec 2008 08:49:20 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081203164920.D60373A6886@core3.amsl.com>
Date: Wed,  3 Dec 2008 08:49:20 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://industryhot.com/" target="_blank">
<img src="http://industryhot.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From ogura@ae.wakwak.com  Wed Dec  3 21:29:29 2008
Return-Path: <ogura@ae.wakwak.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 79F4C3A6818
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed,  3 Dec 2008 21:29:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.848
X-Spam-Level: 
X-Spam-Status: No, score=-14.848 tagged_above=-999 required=5
	tests=[BAYES_80=2, FH_HOST_EQ_D_D_D_D=0.765,
	FH_HOST_EQ_D_D_D_DB=0.888, HELO_DYNAMIC_IPADDR2=4.395,
	HELO_DYNAMIC_SPLIT_IP=3.493, HELO_EQ_IP_ADDR=1.119,
	HOST_EQ_STATIC=1.172, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96,
	RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RCVD_NUMERIC_HELO=2.067,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 3IJ050g74ud0
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed,  3 Dec 2008 21:29:28 -0800 (PST)
Received: from 202.154.23.209.lan.static.cptelecom.net (202.154.23.209.lan.static.cptelecom.net [209.23.154.202])
	by core3.amsl.com (Postfix) with SMTP id E37023A6853
	for <syslog-archive@lists.ietf.org>; Wed,  3 Dec 2008 21:29:27 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Important Message
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081204052927.E37023A6853@core3.amsl.com>
Date: Wed,  3 Dec 2008 21:29:27 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="http://wonderexample.com/" target="_blank">
<img src="http://wonderexample.com/whgiu8.jpg" border=0 alt="Click here to view as a webpage"></a></BODY></HTML>


From kazitlbsk@amsec.com  Thu Dec  4 03:37:46 2008
Return-Path: <kazitlbsk@amsec.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 9E0B03A69C3
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu,  4 Dec 2008 03:37:46 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -33.717
X-Spam-Level: 
X-Spam-Status: No, score=-33.717 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999,
	HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_MX=0.535, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id AiGLVra4PF8q
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu,  4 Dec 2008 03:37:46 -0800 (PST)
Received: from host-200-94-111-147.block.alestra.net.mx (host-200-94-111-147.block.alestra.net.mx [200.94.111.147])
	by core3.amsl.com (Postfix) with SMTP id 3B0783A69C1
	for <syslog-archive@lists.ietf.org>; Thu,  4 Dec 2008 03:37:44 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Re: Order status
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081204113745.3B0783A69C1@core3.amsl.com>
Date: Thu,  4 Dec 2008 03:37:44 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://pullspend.com/" target="_blank">
<img src="http://pullspend.com/gresdf.jpg" border=0 alt="Click here to view as a webpage"></a></BODY></HTML>


From kppdpey@6burts.fsnet.co.uk  Thu Dec  4 18:21:45 2008
Return-Path: <kppdpey@6burts.fsnet.co.uk>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 734E63A6B97
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu,  4 Dec 2008 18:21:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.56
X-Spam-Level: 
X-Spam-Status: No, score=-9.56 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SBL=1.551, RCVD_IN_XBL=3.033, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id bXENa63BUveW
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu,  4 Dec 2008 18:21:44 -0800 (PST)
Received: from regretness.jab.volia.net (regretness.jab.volia.net [93.73.129.68])
	by core3.amsl.com (Postfix) with SMTP id C79BB3A6A78
	for <syslog-archive@ietf.org>; Thu,  4 Dec 2008 18:21:43 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Your order
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081205022143.C79BB3A6A78@core3.amsl.com>
Date: Thu,  4 Dec 2008 18:21:43 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://pullspend.com/" target="_blank">
<img src="http://pullspend.com/jpiysd.jpg" border=0 alt="Click here to view as a webpage"></a></BODY></HTML>


From mnewman3101x@aaeon.com  Thu Dec  4 18:52:09 2008
Return-Path: <mnewman3101x@aaeon.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 649453A635F
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu,  4 Dec 2008 18:52:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.61
X-Spam-Level: 
X-Spam-Status: No, score=-6.61 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_EQ_BIZ=0.288,
	HELO_MISMATCH_BIZ=0.443, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id OCQ+prOoGaxy
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu,  4 Dec 2008 18:52:08 -0800 (PST)
Received: from altwell.biz (unknown [92.15.42.151])
	by core3.amsl.com (Postfix) with SMTP id 93E5B3A68D0
	for <syslog-archive@lists.ietf.org>; Thu,  4 Dec 2008 18:52:07 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Important Message
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081205025207.93E5B3A68D0@core3.amsl.com>
Date: Thu,  4 Dec 2008 18:52:07 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><a href="http://ballmagnet.com/" target="_blank">
<img src="http://ballmagnet.com/uiohg.jpg" border=0 alt="Click here to view as a webpage"></a></BODY></HTML>


From jordi@agregarcontactos.com  Fri Dec  5 02:34:41 2008
Return-Path: <jordi@agregarcontactos.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 0FDF13A6BE9
	for <ietfarch-syslog-archive@core3.amsl.com>; Fri,  5 Dec 2008 02:34:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -40.493
X-Spam-Level: 
X-Spam-Status: No, score=-40.493 tagged_above=-999 required=5
	tests=[BAYES_50=0.001, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 1MT1YQIUyPWm
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Fri,  5 Dec 2008 02:34:40 -0800 (PST)
Received: from aaig.com (unknown [92.112.196.158])
	by core3.amsl.com (Postfix) with SMTP id 574C13A6AFB
	for <syslog-archive@ietf.org>; Fri,  5 Dec 2008 02:34:38 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081205103439.574C13A6AFB@core3.amsl.com>
Date: Fri,  5 Dec 2008 02:34:38 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://throwseveral.com/" target="_blank">
<img src="http://throwseveral.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From lists@alexandersdirect.com  Fri Dec  5 09:39:54 2008
Return-Path: <lists@alexandersdirect.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 040A93A69F1
	for <ietfarch-syslog-archive@core3.amsl.com>; Fri,  5 Dec 2008 09:39:54 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.953
X-Spam-Level: 
X-Spam-Status: No, score=-16.953 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HELO_DYNAMIC_DIALIN=3.384,
	HELO_EQ_DIP_DIALIN=1.573, HOST_EQ_DIP_TDIAL=2.144,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
	RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 2nGBT-Hbkqbc
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Fri,  5 Dec 2008 09:39:53 -0800 (PST)
Received: from p4FDB67F4.dip.t-dialin.net (p4FDB78C8.dip.t-dialin.net [79.219.120.200])
	by core3.amsl.com (Postfix) with SMTP id 17FF03A679F
	for <syslog-archive@lists.ietf.org>; Fri,  5 Dec 2008 09:39:51 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Re: Order status
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081205173952.17FF03A679F@core3.amsl.com>
Date: Fri,  5 Dec 2008 09:39:51 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="toneexact.com" target="_blank">
<img src="http://toneexact.com/jpiysd.jpg" border=0 alt="Click to visit Official Web Site!"></a></BODY></HTML>


From melissa_knowles@adp.com  Fri Dec  5 11:43:30 2008
Return-Path: <melissa_knowles@adp.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 5EAD928C161
	for <ietfarch-syslog-archive@core3.amsl.com>; Fri,  5 Dec 2008 11:43:30 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -12.973
X-Spam-Level: 
X-Spam-Status: No, score=-12.973 tagged_above=-999 required=5
	tests=[BAYES_50=0.001, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR2=4.395,
	HOST_EQ_STATIC=1.172, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id XrWSd7w0KavF
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Fri,  5 Dec 2008 11:43:29 -0800 (PST)
Received: from 66-162-39-18.static.twtelecom.net (66-162-39-18.static.twtelecom.net [66.162.39.18])
	by core3.amsl.com (Postfix) with SMTP id F33CB3A63EB
	for <syslog-archive@ietf.org>; Fri,  5 Dec 2008 11:43:28 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081205194328.F33CB3A63EB@core3.amsl.com>
Date: Fri,  5 Dec 2008 11:43:28 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="mayserve.com" target="_blank">
<img src="http://mayserve.com/str5dfi.jpg" border=0 alt="Click to visit Official Web Site!"></a></BODY></HTML>


From mike@akintekstil.com.tr  Fri Dec  5 15:53:22 2008
Return-Path: <mike@akintekstil.com.tr>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 34FDD3A6C03
	for <ietfarch-syslog-archive@core3.amsl.com>; Fri,  5 Dec 2008 15:53:22 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -39.371
X-Spam-Level: 
X-Spam-Status: No, score=-39.371 tagged_above=-999 required=5
	tests=[BAYES_80=2, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id ThoP+F7D4GQU
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Fri,  5 Dec 2008 15:53:21 -0800 (PST)
Received: from amscowindows.com (unknown [89.205.27.82])
	by core3.amsl.com (Postfix) with SMTP id 7FFCB3A6BF2
	for <syslog-archive@lists.ietf.org>; Fri,  5 Dec 2008 15:53:19 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: RE: Message
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081205235320.7FFCB3A6BF2@core3.amsl.com>
Date: Fri,  5 Dec 2008 15:53:19 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://hourrepeat.com/" target="_blank">
<img src="http://hourrepeat.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From lists@alexandersdirect.com  Fri Dec  5 16:59:50 2008
Return-Path: <lists@alexandersdirect.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 488303A6986
	for <ietfarch-syslog-archive@core3.amsl.com>; Fri,  5 Dec 2008 16:59:50 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -13.248
X-Spam-Level: 
X-Spam-Status: No, score=-13.248 tagged_above=-999 required=5
	tests=[BAYES_50=0.001, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295,
	HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129,
	HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id TgKCFpWAOSUE
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Fri,  5 Dec 2008 16:59:49 -0800 (PST)
Received: from 201-25-93-217.gnace702.dsl.brasiltelecom.net.br (201-25-93-217.gnace702.dsl.brasiltelecom.net.br [201.25.93.217])
	by core3.amsl.com (Postfix) with SMTP id 855EC3A69F8
	for <syslog-archive@ietf.org>; Fri,  5 Dec 2008 16:59:46 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081206005947.855EC3A69F8@core3.amsl.com>
Date: Fri,  5 Dec 2008 16:59:46 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://guidecomplete.com/" target="_blank">
<img src="http://guidecomplete.com/smbid.jpg" border=0 alt="Click to visit Official Web Site!"></a></BODY></HTML>


From mail@ambotech.com  Sun Dec  7 11:20:57 2008
Return-Path: <mail@ambotech.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id D5D033A68F0
	for <ietfarch-syslog-archive@core3.amsl.com>; Sun,  7 Dec 2008 11:20:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.25
X-Spam-Level: 
X-Spam-Status: No, score=-17.25 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_EQ_AU=0.377,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96,
	RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id lheb-hoLh3wp
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sun,  7 Dec 2008 11:20:54 -0800 (PST)
Received: from alcoa.com.au (unknown [12.23.249.114])
	by core3.amsl.com (Postfix) with SMTP id 9DD8F3A67B2
	for <syslog-archive@lists.ietf.org>; Sun,  7 Dec 2008 11:20:51 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: RE: Message
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081207192052.9DD8F3A67B2@core3.amsl.com>
Date: Sun,  7 Dec 2008 11:20:51 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://fieldbody.com/" target="_blank">
<img src="http://fieldbody.com/brgfd.jpg" border=0 alt="Having trouble viewing this email? Click here!"></a></BODY></HTML>


From maf00151nn@andymaura.com  Sun Dec  7 15:17:37 2008
Return-Path: <maf00151nn@andymaura.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 317B73A6977
	for <ietfarch-syslog-archive@core3.amsl.com>; Sun,  7 Dec 2008 15:17:37 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -28.13
X-Spam-Level: 
X-Spam-Status: No, score=-28.13 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 7WrsIV2PAZBd
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sun,  7 Dec 2008 15:17:37 -0800 (PST)
Received: from akdgs.ru (unknown [190.84.11.66])
	by core3.amsl.com (Postfix) with SMTP id DFEC43A6874
	for <syslog-archive@lists.ietf.org>; Sun,  7 Dec 2008 15:17:33 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Delivery Status Notification
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081207231734.DFEC43A6874@core3.amsl.com>
Date: Sun,  7 Dec 2008 15:17:33 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://multiplyneck.com/" target="_blank">
<img src="http://multiplyneck.com/hgsf.jpg" border=0 alt="Click here!"></a></BODY></HTML>


From ne1-ngon@air.nittsu.co.jp  Sun Dec  7 18:57:51 2008
Return-Path: <ne1-ngon@air.nittsu.co.jp>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id B9CD93A67FD
	for <ietfarch-syslog-archive@core3.amsl.com>; Sun,  7 Dec 2008 18:57:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 3.66
X-Spam-Level: ***
X-Spam-Status: No, score=3.66 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR2=4.395,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id e99sVYTMA4HR
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sun,  7 Dec 2008 18:57:51 -0800 (PST)
Received: from 162-52-124-91.pool.ukrtel.net (162-52-124-91.pool.ukrtel.net [91.124.52.162])
	by core3.amsl.com (Postfix) with SMTP id 0A2803A67A4
	for <syslog-archive@ietf.org>; Sun,  7 Dec 2008 18:57:48 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: RE: Message
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081208025750.0A2803A67A4@core3.amsl.com>
Date: Sun,  7 Dec 2008 18:57:48 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><a href="http://youngdistant.com/" target="_blank">
<img src="http://youngdistant.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From nenic@aeroflo.com  Mon Dec  8 02:06:24 2008
Return-Path: <nenic@aeroflo.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id CE37D28C0E7
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon,  8 Dec 2008 02:06:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -18.048
X-Spam-Level: 
X-Spam-Status: No, score=-18.048 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_EQ_IT=0.635,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_RHS_DOB=1.083, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id kTwHBmBfhCyA
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon,  8 Dec 2008 02:06:24 -0800 (PST)
Received: from advantech.it (unknown [118.68.248.149])
	by core3.amsl.com (Postfix) with SMTP id 2C5D23A6A81
	for <syslog-archive@ietf.org>; Mon,  8 Dec 2008 02:06:22 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Your order
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081208100623.2C5D23A6A81@core3.amsl.com>
Date: Mon,  8 Dec 2008 02:06:22 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://possibleexample.com/" target="_blank">
<img src="http://possibleexample.com/hgsf.jpg" border=0 alt="Click here!"></a></BODY></HTML>


From krissy2663@advantech-uk.com  Mon Dec  8 14:21:33 2008
Return-Path: <krissy2663@advantech-uk.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id AA14B3A6AAB
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon,  8 Dec 2008 14:21:33 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -30.519
X-Spam-Level: 
X-Spam-Status: No, score=-30.519 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR2=4.395,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id OpEcK7gIef2y
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon,  8 Dec 2008 14:21:33 -0800 (PST)
Received: from 97-117-177-57.phnx.qwest.net (97-117-177-57.phnx.qwest.net [97.117.177.57])
	by core3.amsl.com (Postfix) with SMTP id A5FD53A6833
	for <syslog-archive@lists.ietf.org>; Mon,  8 Dec 2008 14:21:31 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Re: Order status
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081208222132.A5FD53A6833@core3.amsl.com>
Date: Mon,  8 Dec 2008 14:21:31 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://reciprocitywindow.com/" target="_blank">
<img src="http://reciprocitywindow.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From syslog-bounces@ietf.org  Mon Dec  8 16:22:48 2008
Return-Path: <syslog-bounces@ietf.org>
X-Original-To: syslog-archive@megatron.ietf.org
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id BF54D3A686D;
	Mon,  8 Dec 2008 16:22:48 -0800 (PST)
X-Original-To: syslog@core3.amsl.com
Delivered-To: syslog@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 514DF3A6836
	for <syslog@core3.amsl.com>; Mon,  8 Dec 2008 16:22:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5
	tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001,
	RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id Z1YflcR2u3g6 for <syslog@core3.amsl.com>;
	Mon,  8 Dec 2008 16:22:46 -0800 (PST)
Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117])
	by core3.amsl.com (Postfix) with ESMTP id 1EB663A686D
	for <syslog@ietf.org>; Mon,  8 Dec 2008 16:22:46 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.33,737,1220227200"; 
	d="scan'208,217";a="209112925"
Received: from sj-dkim-4.cisco.com ([171.71.179.196])
	by sj-iport-6.cisco.com with ESMTP; 09 Dec 2008 00:22:40 +0000
Received: from sj-core-4.cisco.com (sj-core-4.cisco.com [171.68.223.138])
	by sj-dkim-4.cisco.com (8.12.11/8.12.11) with ESMTP id mB90MeoG019266; 
	Mon, 8 Dec 2008 16:22:40 -0800
Received: from xbh-sjc-221.amer.cisco.com (xbh-sjc-221.cisco.com
	[128.107.191.63])
	by sj-core-4.cisco.com (8.13.8/8.13.8) with ESMTP id mB90MehG007603;
	Tue, 9 Dec 2008 00:22:40 GMT
Received: from xmb-sjc-236.amer.cisco.com ([128.107.191.121]) by
	xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); 
	Mon, 8 Dec 2008 16:22:40 -0800
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Mon, 8 Dec 2008 16:22:34 -0800
Message-ID: <85B2F271FDF6B949B3672BA5A7BB62FB06D30E9F@xmb-sjc-236.amer.cisco.com>
In-Reply-To: <1BA601B02314084980FE9D0630FE9793053F8D36@xmb-sjc-227.amer.cisco.com>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: syslog-sign (was: RE: [Syslog] FW: syslog WG status for saag)
Thread-Index: AclKgSu/5BKeKNAwRIeVGWM0pEiuFwBmcp1qA14dg+A=
References: <1BA601B02314084980FE9D0630FE9793053F8D36@xmb-sjc-227.amer.cisco.com>
From: "Alexander Clemm (alex)" <alex@cisco.com>
To: "Chris Lonvick (clonvick)" <clonvick@cisco.com>, <syslog@ietf.org>,
	"David Harrington" <ietfdbh@comcast.net>
X-OriginalArrivalTime: 09 Dec 2008 00:22:40.0854 (UTC)
	FILETIME=[3F48D760:01C95994]
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=9795; t=1228782160;
	x=1229646160; c=relaxed/simple; s=sjdkim4002;
	h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version;
	d=cisco.com; i=alex@cisco.com;
	z=From:=20=22Alexander=20Clemm=20(alex)=22=20<alex@cisco.com >
	|Subject:=20syslog-sign=20(was=3A=20RE=3A=20[Syslog]=20FW=3
	A=20syslog=20WG=20status=20for=20saag) |Sender:=20;
	bh=JweDZhFi7TGqQ2M5Ig6+FuX9wUA0COruUXt4MFNtet8=;
	b=QZc8RWxkAnUiDpoO6R5G8lrLDT9GaGnVA90nW+D5D3YwZrZNhsTWRng2Ox
	csKcpRNx7m/l1FpRD1IDRcJ/yPI2pV2hOz2w3LdDcDvEIAC5CyC0Ot6Oq28b
	N6/Qc5jQhp;
Authentication-Results: sj-dkim-4; header.From=alex@cisco.com; dkim=pass (
	sig from cisco.com/sjdkim4002 verified; ); 
Subject: [Syslog] syslog-sign (was: RE:  FW: syslog WG status for saag)
X-BeenThere: syslog@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Issues in Network Event Logging <syslog.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/syslog>
List-Post: <mailto:syslog@ietf.org>
List-Help: <mailto:syslog-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=subscribe>
Content-Type: multipart/mixed; boundary="===============0639412376=="
Sender: syslog-bounces@ietf.org
Errors-To: syslog-bounces@ietf.org

This is a multi-part message in MIME format.

--===============0639412376==
Content-class: urn:content-classes:message
Content-Type: multipart/alternative;
	boundary="----_=_NextPart_001_01C95994.3BFDBBFC"

This is a multi-part message in MIME format.

------_=_NextPart_001_01C95994.3BFDBBFC
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi,

=20

FYI, as anticipated by David and Chris, I have just posted the
syslog-sign draft which should appear momentarily.  Please kindly review
and verify that your issues have been resolved, as applicable. =20

=20

Thank you

--- Alex

=20

=20

=20

From: syslog-bounces@ietf.org [mailto:syslog-bounces@ietf.org] On Behalf
Of Chris Lonvick (clonvick)
Sent: Friday, November 21, 2008 12:52 PM
To: syslog@ietf.org
Subject: [Syslog] FW: syslog WG status for saag

=20

Hi Folks,

An update for the group which David submitted to our ADs this week.

David and I stopped by the RFC Editor's desk yesterday.  We asked about
our 4 documents and were assured that they are all going to be placed
into AUTH48 this week.  Also, draft-ietf-ipcdn-pktc-eventmess-14.txt has
dependencies upon our documents which have been cleared and so is also
going forward.

This leaves us with our final piece of work which is syslog-sign.  Alex
has been addressing the comments from the list and will put out a new
draft (hopefully) next week.  Let's focus on this and get 'er done.
Since there are several changes, we don't want to point out each one,
but will ask people to review the document and verify that your issue(s)
has been resolved.  As always, please send in a note to the list after
review to let us know that we have WG consensus on it.

Thanks,
Chris and David



 -----Original Message-----
From:   David Harrington [mailto:ietfdbh@comcast.net]
Sent:   Wednesday, November 19, 2008 11:58 AM Pacific Standard Time
To:     'Pasi Eronen'; 'Tim Polk'
Cc:     Chris Lonvick (clonvick)
Subject:        syslog WG status for saag

Hi,

The syslog WG did not meet at ietf73.

The protocol, udp, and tls documents are in the RFC-Editor queue, and
auth48 should start this week. The syslog-sign document is in AD
review, and a new revision should be published within a week. We
expect one more revision will be needed, mostly for editorial fixes.

The chairs recommend that once this work completes, the syslog WG be
closed.

There is one charter item not completed - a MIB module. The WG
believes syslog.conf is widely used and appropriate for configuration.
Existing applications already provide log analysis. Due to OS
differences in syslog approaches, a single standard MIB module is
problematic for monitoring syslog statistics and state. Other
syslog-related data modeling is being done in the OPSAWG WG. MIB
modules for monitoring syslog state be developed in the OPSAWG WG,
where operators can help define what information and format would be
most useful to them.

David Harrington
dbharrington@comcast.net
ietfdbh@comcast.net
dharrington@huawei.com


------_=_NextPart_001_01C95994.3BFDBBFC
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" =
xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" =
xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)">
<title>FW: syslog WG status for saag</title>
<style>
<!--
 /* Font Definitions */
 @font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
p
	{mso-style-priority:99;
	mso-margin-top-alt:auto;
	margin-right:0in;
	mso-margin-bottom-alt:auto;
	margin-left:0in;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
span.EmailStyle18
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page Section1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
	{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
 <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
 <o:shapelayout v:ext=3D"edit">
  <o:idmap v:ext=3D"edit" data=3D"1" />
 </o:shapelayout></xml><![endif]-->
</head>

<body lang=3DEN-US link=3Dblue vlink=3Dpurple>

<div class=3DSection1>

<p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Hi,<o:p></o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>FYI, as anticipated by David and Chris, I have just =
posted the
syslog-sign draft which should appear momentarily.&nbsp; Please kindly =
review and
verify that your issues have been resolved, as applicable. =
&nbsp;<o:p></o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Thank you<o:p></o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>--- Alex<o:p></o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p>&nbsp;</o:p></span></p>

<p class=3DMsoNormal><span =
style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p>&nbsp;</o:p></span></p>

<div>

<div style=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt =
0in 0in 0in'>

<p class=3DMsoNormal><b><span =
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span>=
</b><span
style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'> =
syslog-bounces@ietf.org
[mailto:syslog-bounces@ietf.org] <b>On Behalf Of </b>Chris Lonvick =
(clonvick)<br>
<b>Sent:</b> Friday, November 21, 2008 12:52 PM<br>
<b>To:</b> syslog@ietf.org<br>
<b>Subject:</b> [Syslog] FW: syslog WG status for =
saag<o:p></o:p></span></p>

</div>

</div>

<p class=3DMsoNormal><o:p>&nbsp;</o:p></p>

<p style=3D'margin-bottom:12.0pt'><span style=3D'font-size:10.0pt'>Hi =
Folks,<br>
<br>
An update for the group which David submitted to our ADs this week.<br>
<br>
David and I stopped by the RFC Editor's desk yesterday.&nbsp; We asked =
about
our 4 documents and were assured that they are all going to be placed =
into
AUTH48 this week.&nbsp; Also, draft-ietf-ipcdn-pktc-eventmess-14.txt has
dependencies upon our documents which have been cleared and so is also =
going
forward.<br>
<br>
This leaves us with our final piece of work which is syslog-sign.&nbsp; =
Alex
has been addressing the comments from the list and will put out a new =
draft
(hopefully) next week.&nbsp; Let's focus on this and get 'er done.&nbsp; =
Since
there are several changes, we don't want to point out each one, but will =
ask
people to review the document and verify that your issue(s) has been
resolved.&nbsp; As always, please send in a note to the list after =
review to
let us know that we have WG consensus on it.<br>
<br>
Thanks,<br>
Chris and David<br>
<br>
<br>
<br>
&nbsp;-----Original Message-----<br>
From: &nbsp; David Harrington [<a =
href=3D"mailto:ietfdbh@comcast.net">mailto:ietfdbh@comcast.net</a>]<br>
Sent:&nbsp;&nbsp; Wednesday, November 19, 2008 11:58 AM Pacific Standard =
Time<br>
To:&nbsp;&nbsp;&nbsp;&nbsp; 'Pasi Eronen'; 'Tim Polk'<br>
Cc:&nbsp;&nbsp;&nbsp;&nbsp; Chris Lonvick (clonvick)<br>
Subject:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; syslog WG status for =
saag<br>
<br>
Hi,<br>
<br>
The syslog WG did not meet at ietf73.<br>
<br>
The protocol, udp, and tls documents are in the RFC-Editor queue, =
and<br>
auth48 should start this week. The syslog-sign document is in AD<br>
review, and a new revision should be published within a week. We<br>
expect one more revision will be needed, mostly for editorial fixes.<br>
<br>
The chairs recommend that once this work completes, the syslog WG be<br>
closed.<br>
<br>
There is one charter item not completed - a MIB module. The WG<br>
believes syslog.conf is widely used and appropriate for =
configuration.<br>
Existing applications already provide log analysis. Due to OS<br>
differences in syslog approaches, a single standard MIB module is<br>
problematic for monitoring syslog statistics and state. Other<br>
syslog-related data modeling is being done in the OPSAWG WG. MIB<br>
modules for monitoring syslog state be developed in the OPSAWG WG,<br>
where operators can help define what information and format would be<br>
most useful to them.<br>
<br>
David Harrington<br>
dbharrington@comcast.net<br>
ietfdbh@comcast.net<br>
dharrington@huawei.com</span><o:p></o:p></p>

</div>

</body>

</html>

------_=_NextPart_001_01C95994.3BFDBBFC--

--===============0639412376==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Syslog mailing list
Syslog@ietf.org
https://www.ietf.org/mailman/listinfo/syslog

--===============0639412376==--


From knapp@3wire.com  Tue Dec  9 14:47:06 2008
Return-Path: <knapp@3wire.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id D2E0B3A687B
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue,  9 Dec 2008 14:47:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -12.57
X-Spam-Level: 
X-Spam-Status: No, score=-12.57 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611,
	HTML_FONT_LOW_CONTRAST=0.124, HTML_IMAGE_ONLY_08=1.787,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_XBL=3.033, RDNS_NONE=0.1, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_SBL=20, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id c1Xv55d-ilPZ
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue,  9 Dec 2008 14:47:06 -0800 (PST)
Received: from altelco.net (unknown [189.83.170.72])
	by core3.amsl.com (Postfix) with SMTP id 59ADC3A67FC
	for <syslog-archive@ietf.org>; Tue,  9 Dec 2008 14:47:00 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Delivery Status Notification
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081209224702.59ADC3A67FC@core3.amsl.com>
Date: Tue,  9 Dec 2008 14:47:00 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><table>
<tr><td><a href="http://dearnice.com/"><img src="http://images.dearnice.com/banner_xmastime.jpg" border=0 alt="Click Here!"></a><br>
<br><a href="http://dearnice.com/"><b>You won't find such classy things in any other place! </b></td></tr></table>
<br><br><br><font size="-2" color="#f0f0f0">
chancellor says that he just wanted to make the governments positionHe senses that a time bomb is ticking, but he has no idea when the<br>
assurance and dependability. But few seem fooled.He repeats the words that have been heard frequently at Downing</font></BODY></HTML>


From jlowden@aerotek.com  Wed Dec 10 04:24:41 2008
Return-Path: <jlowden@aerotek.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 95F283A68C3
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 10 Dec 2008 04:24:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.73
X-Spam-Level: 
X-Spam-Status: No, score=-17.73 tagged_above=-999 required=5
	tests=[BAYES_95=3, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_DHCP=1.398,
	HELO_DYNAMIC_IPADDR=2.426, HTML_FONT_LOW_CONTRAST=0.124,
	HTML_IMAGE_ONLY_08=1.787, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877,
	RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_WEOFFER=0.3,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SBL=20,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id It50qZnE8EoH
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 10 Dec 2008 04:24:41 -0800 (PST)
Received: from dslb-088-073-243-059.pools.arcor-ip.net (dslb-088-073-243-059.pools.arcor-ip.net [88.73.243.59])
	by core3.amsl.com (Postfix) with SMTP id 3998D3A67A5
	for <syslog-archive@ietf.org>; Wed, 10 Dec 2008 04:24:36 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081210122438.3998D3A67A5@core3.amsl.com>
Date: Wed, 10 Dec 2008 04:24:36 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><table>
<tr><td><a href="http://flatfill.com/"><img src="http://images.flatfill.com/banner_xmastime.jpg" border=0 alt="Click Here!"></a><br>
<br><a href="http://flatfill.com/"><b>What we offer can't be found in any other place, so don't miss it!</b></td></tr></table>
<br><br><br><font size="-2" color="#f0f0f0">
almost take an event at point A and simultaneously take you to thetime to come. If there is a wide difference between what we see and<br>
He feels, said Wien, that hea change not yet identified</font></BODY></HTML>


From marybeth_white@3com.com  Wed Dec 10 12:41:55 2008
Return-Path: <marybeth_white@3com.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id DE0343A68E5
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 10 Dec 2008 12:41:55 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.118
X-Spam-Level: **
X-Spam-Status: No, score=2.118 tagged_above=-999 required=5 tests=[BAYES_80=2,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888,
	HELO_DYNAMIC_IPADDR2=4.395, HELO_DYNAMIC_SPLIT_IP=3.493,
	HELO_EQ_DYNAMIC=1.144, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id skWNEBvDitEW
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 10 Dec 2008 12:41:55 -0800 (PST)
Received: from 219.85-85-240.dynamic.clientes.euskaltel.es (219.85-85-240.dynamic.clientes.euskaltel.es [85.85.240.219])
	by core3.amsl.com (Postfix) with SMTP id 6CDA43A6909
	for <syslog-archive@lists.ietf.org>; Wed, 10 Dec 2008 12:41:52 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081210204153.6CDA43A6909@core3.amsl.com>
Date: Wed, 10 Dec 2008 12:41:52 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><a href="http://replylegacy.com/" target="_blank">
<img src="http://replylegacy.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From syslog-bounces@ietf.org  Wed Dec 10 12:51:50 2008
Return-Path: <syslog-bounces@ietf.org>
X-Original-To: syslog-archive@megatron.ietf.org
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 874EE3A682B;
	Wed, 10 Dec 2008 12:51:50 -0800 (PST)
X-Original-To: syslog@core3.amsl.com
Delivered-To: syslog@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id DE88A3A682B
	for <syslog@core3.amsl.com>; Wed, 10 Dec 2008 12:51:48 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.229
X-Spam-Level: 
X-Spam-Status: No, score=-6.229 tagged_above=-999 required=5 tests=[AWL=0.370, 
	BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id QQ2bX5F+0QQA for <syslog@core3.amsl.com>;
	Wed, 10 Dec 2008 12:51:48 -0800 (PST)
Received: from sj-iport-2.cisco.com (sj-iport-2.cisco.com [171.71.176.71])
	by core3.amsl.com (Postfix) with ESMTP id 201763A63EC
	for <syslog@ietf.org>; Wed, 10 Dec 2008 12:51:48 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.33,748,1220227200"; d="scan'208";a="113701489"
Received: from sj-dkim-5.cisco.com ([171.68.10.79])
	by sj-iport-2.cisco.com with ESMTP; 10 Dec 2008 20:51:42 +0000
Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254])
	by sj-dkim-5.cisco.com (8.12.11/8.12.11) with ESMTP id mBAKpgkR023684
	for <syslog@ietf.org>; Wed, 10 Dec 2008 12:51:42 -0800
Received: from sjc-cde-011.cisco.com (sjc-cde-011.cisco.com [171.69.16.68])
	by sj-core-2.cisco.com (8.13.8/8.13.8) with ESMTP id mBAKpgpj022977
	for <syslog@ietf.org>; Wed, 10 Dec 2008 20:51:42 GMT
Date: Wed, 10 Dec 2008 12:51:42 -0800 (PST)
From: Chris Lonvick <clonvick@cisco.com>
To: syslog@ietf.org
Message-ID: <Pine.GSO.4.63.0812101215330.3359@sjc-cde-011.cisco.com>
MIME-Version: 1.0
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1462; t=1228942302;
	x=1229806302; c=relaxed/simple; s=sjdkim5002;
	h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version;
	d=cisco.com; i=clonvick@cisco.com;
	z=From:=20Chris=20Lonvick=20<clonvick@cisco.com>
	|Subject:=20Status=20Update |Sender:=20;
	bh=LWQLJl252UmBDzQRjk6TmtB8u7EWHkkVWMU3deg1aYo=;
	b=RsEsr2kNqUFV2sZ4ugQhWKOfT5WWtSoHpa/QlruWYSdQiL0+OOqgx7Uz0t
	tbPAInIXSOOUgAdBHtI0iQwOBTgRhuIIVm8YnRzoka7jgJyLBYSBLlcQ7loB
	oTSSC6pGGx;
Authentication-Results: sj-dkim-5; header.From=clonvick@cisco.com; dkim=pass (
	sig from cisco.com/sjdkim5002 verified; ); 
Subject: [Syslog] Status Update
X-BeenThere: syslog@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Issues in Network Event Logging <syslog.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/syslog>
List-Post: <mailto:syslog@ietf.org>
List-Help: <mailto:syslog-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Sender: syslog-bounces@ietf.org
Errors-To: syslog-bounces@ietf.org

Hi Folks,

Just a quick update for everyone.  Here's the lineup for our documents:
"The syslog Protocol" will be RFC 5424
"TLS Transport Mapping for Syslog" will be RFC 5425
"Transmission of syslog messages over UDP" will be RFC 5426
"Textual Conventions for Syslog Management" will be RFC 5427

All of these have been approved and will be published RSN.  The holdup is 
a problem that David found in one of his final reviews.  In "The syslog 
Protocol", Rainer has examples using "0" for the Enterprise ID.  ...which 
seemed resonable to all of us when he first proposed it.  However, there 
is no "example" Enterprise ID and "0" is actually reserved for IANA. 
David has requested that the IANA create an example Enterprise ID so that 
we can use that in this and other RFCs.  The RFC Editor will publish our 
documents just as soon as we get an answer back from the IANA.

For those of you interested, draft-ietf-ipcdn-eventmess-14 will be 
published as RFC 5428, "Management Event Management Information Base (MIB) 
for PacketCable- and IPCablecom-Compliant Devices".  This document 
references our works so the RFC Editor placed it into the same batch.

In the meantime, Alex is submitting the latest version of syslog-sign 
which has updates to address the IESG review and some other comments. 
When it gets into the ID repository, please look it over to make sure that 
it addresses any comments that you made.

Thanks,
Chris
_______________________________________________
Syslog mailing list
Syslog@ietf.org
https://www.ietf.org/mailman/listinfo/syslog


From larantes@ajinfo.com.br  Wed Dec 10 13:11:06 2008
Return-Path: <larantes@ajinfo.com.br>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 0361C3A6942
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 10 Dec 2008 13:11:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -16.012
X-Spam-Level: 
X-Spam-Status: No, score=-16.012 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HOST_EQ_D_D_D_D=0.765,
	FH_HOST_EQ_D_D_D_DB=0.888, HELO_DYNAMIC_IPADDR2=4.395,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877,
	RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_RCVD_IP=1.931, TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id nHU80GDzUnOo
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 10 Dec 2008 13:11:05 -0800 (PST)
Received: from 105-8.78-83.cust.bluewin.ch (105-38.78-83.cust.bluewin.ch [83.78.38.105])
	by core3.amsl.com (Postfix) with SMTP id 44C1D3A682B
	for <syslog-archive@lists.ietf.org>; Wed, 10 Dec 2008 13:11:01 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Your order
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
X-Antivirus: avast! (VPS 081208-0, 08.12.2008), Outbound message
X-Antivirus-Status: Clean
Message-Id: <20081210211103.44C1D3A682B@core3.amsl.com>
Date: Wed, 10 Dec 2008 13:11:01 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="http://resolutionor.com/" target="_blank">
<img src="http://resolutionor.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From syslog-bounces@ietf.org  Wed Dec 10 16:15:03 2008
Return-Path: <syslog-bounces@ietf.org>
X-Original-To: syslog-archive@megatron.ietf.org
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 4B2953A69F0;
	Wed, 10 Dec 2008 16:15:03 -0800 (PST)
X-Original-To: syslog@ietf.org
Delivered-To: syslog@core3.amsl.com
Received: by core3.amsl.com (Postfix, from userid 0)
	id D016C3A69F0; Wed, 10 Dec 2008 16:15:01 -0800 (PST)
From: Internet-Drafts@ietf.org
To: i-d-announce@ietf.org
Content-Type: Multipart/Mixed; Boundary="NextPart"
Mime-Version: 1.0
Message-Id: <20081211001501.D016C3A69F0@core3.amsl.com>
Date: Wed, 10 Dec 2008 16:15:01 -0800 (PST)
Cc: syslog@ietf.org
Subject: [Syslog] I-D Action:draft-ietf-syslog-sign-24.txt
X-BeenThere: syslog@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Issues in Network Event Logging <syslog.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/syslog>
List-Post: <mailto:syslog@ietf.org>
List-Help: <mailto:syslog-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=subscribe>
Sender: syslog-bounces@ietf.org
Errors-To: syslog-bounces@ietf.org


--NextPart

A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Security Issues in Network Event Logging Working Group of the IETF.


	Title           : Signed syslog Messages
	Author(s)       : J. Kelsey, et al.
	Filename        : draft-ietf-syslog-sign-24.txt
	Pages           : 39
	Date            : 2008-12-10

This document describes a mechanism to add origin authentication,
message integrity, replay resistance, message sequencing, and
detection of missing messages to the transmitted syslog messages.
This specification is intended to be used in conjunction with the
work defined in [RFC5424], "The syslog Protocol".

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-syslog-sign-24.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Message/External-body;
	name="draft-ietf-syslog-sign-24.txt";
	site="ftp.ietf.org";
	access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID: <2008-12-10160806.I-D@ietf.org>


--NextPart
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Syslog mailing list
Syslog@ietf.org
https://www.ietf.org/mailman/listinfo/syslog

--NextPart--


From observe@a54321.com  Thu Dec 11 04:03:57 2008
Return-Path: <observe@a54321.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 1B17A3A67B3
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 11 Dec 2008 04:03:57 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -40.832
X-Spam-Level: 
X-Spam-Status: No, score=-40.832 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877,
	RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_HTML_IMG_ONLY=1.666,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_RHS_DOB=1.083, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 6B7Yhdp8AwER
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 11 Dec 2008 04:03:56 -0800 (PST)
Received: from allenovery.com (unknown [85.97.146.68])
	by core3.amsl.com (Postfix) with SMTP id 192453A68C6
	for <syslog-archive@lists.ietf.org>; Thu, 11 Dec 2008 04:03:54 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Your order
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081211120355.192453A68C6@core3.amsl.com>
Date: Thu, 11 Dec 2008 04:03:54 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><table>
<tr><td><a href="http://severaltradition.com/"><img src="http://severaltradition.com/ioreuu78.jpg" border=0 alt="Visit site now!"></a><br>
<br></td></tr></table></BODY></HTML>


From lillian@aichain.com  Thu Dec 11 08:32:14 2008
Return-Path: <lillian@aichain.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id A82293A6782
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 11 Dec 2008 08:32:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.288
X-Spam-Level: 
X-Spam-Status: No, score=-9.288 tagged_above=-999 required=5
	tests=[BAYES_60=1, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id i+c3r86+3fv6
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 11 Dec 2008 08:32:14 -0800 (PST)
Received: from afterchaos.com (unknown [94.178.198.20])
	by core3.amsl.com (Postfix) with SMTP id 10ED13A6C53
	for <syslog-archive@ietf.org>; Thu, 11 Dec 2008 08:32:11 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081211163212.10ED13A6C53@core3.amsl.com>
Date: Thu, 11 Dec 2008 08:32:11 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://abovesell.com/" target="_blank">
<img src="http://abovesell.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From kisatodd@360.cc  Thu Dec 11 08:54:09 2008
Return-Path: <kisatodd@360.cc>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 52C813A6768
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 11 Dec 2008 08:54:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.268
X-Spam-Level: 
X-Spam-Status: No, score=-2.268 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295,
	HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129, HELO_EQ_PL=1.135,
	HOST_EQ_PL=1.95, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_WEB=0.619,
	RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id V1bgDEA24717
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 11 Dec 2008 08:54:08 -0800 (PST)
Received: from 83-238-238-19.adsl.inetia.pl (83-238-230-143.adsl.inetia.pl [83.238.230.143])
	by core3.amsl.com (Postfix) with SMTP id 8A2533A684C
	for <syslog-archive@lists.ietf.org>; Thu, 11 Dec 2008 08:54:05 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Your order
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081211165406.8A2533A684C@core3.amsl.com>
Date: Thu, 11 Dec 2008 08:54:05 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="http://eachscale.com/" target="_blank">
<img src="http://eachscale.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From martini@accortour.com.br  Thu Dec 11 09:07:36 2008
Return-Path: <martini@accortour.com.br>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 26C0D3A6A77
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 11 Dec 2008 09:07:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -18.608
X-Spam-Level: 
X-Spam-Status: No, score=-18.608 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HELO_MISMATCH_COM=0.553, HOST_EQ_PL=1.95,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_XBL=3.033, SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id D62cIP+af99a
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 11 Dec 2008 09:07:36 -0800 (PST)
Received: from 24hourmall.com (eju19.internetdsl.tpnet.pl [83.15.102.19])
	by core3.amsl.com (Postfix) with SMTP id C496E3A69A0
	for <syslog-archive@lists.ietf.org>; Thu, 11 Dec 2008 09:07:34 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Delivery Status Notification
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
X-Antivirus: avast! (VPS 080516-1, 2008-05-16), Outbound message
X-Antivirus-Status: Clean
Message-Id: <20081211170734.C496E3A69A0@core3.amsl.com>
Date: Thu, 11 Dec 2008 09:07:34 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="http://strengthdown.com/" target="_blank">
<img src="http://strengthdown.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From n1rgsdd@agimedia.com  Thu Dec 11 11:37:58 2008
Return-Path: <n1rgsdd@agimedia.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id B0E813A688C
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 11 Dec 2008 11:37:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.007
X-Spam-Level: 
X-Spam-Status: No, score=-9.007 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 8L4IeHIZon2q
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 11 Dec 2008 11:37:58 -0800 (PST)
Received: from absoluteforeclosures.com (unknown [121.241.168.164])
	by core3.amsl.com (Postfix) with SMTP id 75DA53A6817
	for <syslog-archive@ietf.org>; Thu, 11 Dec 2008 11:37:56 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Re: Order status
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081211193757.75DA53A6817@core3.amsl.com>
Date: Thu, 11 Dec 2008 11:37:56 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://printnumeral.com/" target="_blank">
<img src="http://printnumeral.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From kirsi.saari@allianz.de  Thu Dec 11 16:04:52 2008
Return-Path: <kirsi.saari@allianz.de>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 18ECD3A6AD0
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 11 Dec 2008 16:04:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.18
X-Spam-Level: 
X-Spam-Status: No, score=-7.18 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_EQ_JP=1.244,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id RHfF5NvEqMDa
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 11 Dec 2008 16:04:52 -0800 (PST)
Received: from aladeebit.com (unknown [87.84.240.18])
	by core3.amsl.com (Postfix) with SMTP id DA6F63A6AA9
	for <syslog-archive@lists.ietf.org>; Thu, 11 Dec 2008 16:04:50 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081212000450.DA6F63A6AA9@core3.amsl.com>
Date: Thu, 11 Dec 2008 16:04:50 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://strengthdown.com/" target="_blank">
<img src="http://strengthdown.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From mmiranda@alicopsa.cl  Fri Dec 12 13:10:45 2008
Return-Path: <mmiranda@alicopsa.cl>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 7042B3A6B1A
	for <ietfarch-syslog-archive@core3.amsl.com>; Fri, 12 Dec 2008 13:10:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -15.938
X-Spam-Level: 
X-Spam-Status: No, score=-15.938 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_FONT_LOW_CONTRAST=0.124, HTML_IMAGE_ONLY_08=1.787,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, J_CHICKENPOX_73=0.6,
	MIME_HTML_ONLY=1.457, RAZOR2_CF_RANGE_51_100=0.5,
	RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905,
	RDNS_NONE=0.1, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 2iKRMHTgD1SZ
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Fri, 12 Dec 2008 13:10:44 -0800 (PST)
Received: from adventisthealthcare.com (unknown [201.19.91.233])
	by core3.amsl.com (Postfix) with SMTP id E653E3A68B4
	for <syslog-archive@lists.ietf.org>; Fri, 12 Dec 2008 13:10:39 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081212211040.E653E3A68B4@core3.amsl.com>
Date: Fri, 12 Dec 2008 13:10:39 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><table>
<tr><td><a href="http://pluralcourage.com/"><img src="http://pluralcourage.com/jksh.jpg" border=0 alt="Go to site!"></a><br>
<br><a href="http://pluralcourage.com/"><b>Last day of sale</b></td></tr></table>
<br><br><br><font size="-1" color="#edf5fc">
caused cats and dogs to both go into kidney failure.and is due to arrive at New York's John F. Kennedy<br></font></BODY></HTML>


From jcollins@amtelecom.net  Fri Dec 12 20:08:47 2008
Return-Path: <jcollins@amtelecom.net>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id D87923A6986
	for <ietfarch-syslog-archive@core3.amsl.com>; Fri, 12 Dec 2008 20:08:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.668
X-Spam-Level: 
X-Spam-Status: No, score=-10.668 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_FONT_LOW_CONTRAST=0.124, HTML_IMAGE_ONLY_08=1.787,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E8_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id SN3Spt2UZEoN
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Fri, 12 Dec 2008 20:08:47 -0800 (PST)
Received: from amboxco.com (unknown [201.29.177.145])
	by core3.amsl.com (Postfix) with SMTP id 784F83A67D7
	for <syslog-archive@lists.ietf.org>; Fri, 12 Dec 2008 20:08:43 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Your order
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081213040844.784F83A67D7@core3.amsl.com>
Date: Fri, 12 Dec 2008 20:08:43 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><table>
<tr><td><a href="http://intuitionseem.com/"><img src="http://intuitionseem.com/jksh.jpg" border=0 alt="Go to site!"></a><br>
<br><a href="http://intuitionseem.com/"><b>Most prices are cut</b></td></tr></table>
<br><br><br><font size="-1" color="#edf5fc">
9 overs.Baseball games, but that he never bet against his team<br></font></BODY></HTML>


From mervdavidi@abadvies.nl  Sun Dec 14 16:53:39 2008
Return-Path: <mervdavidi@abadvies.nl>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id C45A03A6947
	for <ietfarch-syslog-archive@core3.amsl.com>; Sun, 14 Dec 2008 16:53:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -40.654
X-Spam-Level: 
X-Spam-Status: No, score=-40.654 tagged_above=-999 required=5
	tests=[AWL=-0.283, BAYES_99=3.5, FH_RELAY_NODNS=1.451,
	HELO_MISMATCH_COM=0.553, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
	RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 5e-wdaW-p4zs
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sun, 14 Dec 2008 16:53:39 -0800 (PST)
Received: from anarchie-online.net (unknown [222.124.14.70])
	by core3.amsl.com (Postfix) with SMTP id D33E13A67F1
	for <syslog-archive@lists.ietf.org>; Sun, 14 Dec 2008 16:53:27 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081215005329.D33E13A67F1@core3.amsl.com>
Date: Sun, 14 Dec 2008 16:53:27 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://whenthink.com/" target="_blank">
<img src="http://whenthink.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From zsdaviston@ietheric.net  Mon Dec 15 01:39:52 2008
Return-Path: <zsdaviston@ietheric.net>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id B12093A6804
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon, 15 Dec 2008 01:39:52 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -56.377
X-Spam-Level: 
X-Spam-Status: No, score=-56.377 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999,
	HELO_DYNAMIC_IPADDR=2.426, HTML_MESSAGE=0.001,
	HTML_MIME_NO_HTML_TAG=0.097, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5,
	RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905,
	RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_FROM_DRUGS=1.666,
	SUBJ_ALL_CAPS=2.077, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id YWThxS186Ta8
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon, 15 Dec 2008 01:39:52 -0800 (PST)
Received: from ppp-94-67-77-165.home.otenet.gr (ppp-94-67-77-165.home.otenet.gr [94.67.77.165])
	by core3.amsl.com (Postfix) with SMTP id 544B53A6888
	for <syslog-archive@ietf.org>; Mon, 15 Dec 2008 01:39:50 -0800 (PST)
Message-Id: <20081215133956.6158.qmail@ppp-94-67-77-165.home.otenet.gr>
To: <syslog-archive@ietf.org>
Subject: RE: SALE 89% OFF
From: VIAGRA INC <syslog-archive@ietf.org>
MIME-Version: 1.0
Content-Type: text/html
Date: Mon, 15 Dec 2008 01:39:50 -0800 (PST)

<style>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html dir="ltr">
    <head>
        <meta http-equiv=Content-Type content="text/html; charset=unicode">
<meta name=Generator content="Microsoft SafeHTML">
<title>WL 90-day Email 1a</title>
<table width=550 border=0 cellpadding=0 cellspacing=0 bgcolor="#999999">
</tr>
<tr valign=top>
<td colspan=5><img src="http://ads1.wczh.com/ads/pronws/CIQ3536/1a_banner.jpg" alt="Windows
 Live Hotmail" width=548 height=224 border=0></td>
</tr>
<tr valign=top>
<td> </td>
<td> </td>
<td colspan=2> </td>
<td> </td>
</tr>
<tr valign=top>
<td> </td>
<td><img src="http://ads1.ydwv.com/ads/pronws/CIQ3536/1a_hotmail.jpg" alt="Hotmail Inbox" width=122 height=130 border=0></td>
<td colspan=2><font face="Verdana, Arial, Helvetica, sans-serif" style="font-size:14px;font-weight:bold;color:#0099ff">Changes you'll
 appreciate as a loyal Hotmail user</font>
<font face="Verdana, Arial, Helvetica, sans-serif" style="font-size:11px">
<br>
Let's hear it for a clean, customizable design! The results? Less
 clutter on the page and the ability to choose your own color theme.
 Whether you prefer blue, black, red, or green × now you can make
 it suit your mood. Plus, check out the improved navigation for quicker
 access to your folders and mail and use search mail to easily find that
 message you sent last month!
<br>
<a href="http://cimail15.inna.com/Key=5289.DgYJ.C.C.Hlqzpy" style="color:#0099ff" target="_blank"> Find out what else has
 changed</a></font></td>
<td> </td>
</tr>
<tr valign=top>
<td> </td>
<td> </td>
<td> </td>
<td> </td>
<td> </td>
</tr>
<tr valign=top>
<td> </td>
<td colspan=2><font face="Verdana, Arial, Helvetica, sans-serif" style="font-size:14px;font-weight:bold;color:#0099ff">Manage your
 spam</font> <font face="Verdana, Arial, Helvetica, sans-serif" style="font-size:11px"> <br>
Thanks to color codes (yellow and red) on incoming messages, you'll be
 alerted to suspicious e-mail. Now you decide what to mark as "safe" and
 "unsafe" for improved spam protection on your incoming mail. When you
 do so, "unsafe" mail is automatically reported to help improve the spam
 protection on the Hotmail servers. Good news: this can help you receive
 less spam over time!<br>
<br>
<a href="http://cimail15.owvj.org/Key=5289.DgYJ.D.C.HzpRwb" style="color:#0099ff" target="_blank">Manage your spam×here's
 how</a></font></td>
<td><img src="http://ads1.hxvo.org/ads/pronws/CIQ3536/1a_spam.jpg" alt=Spam width=119 height=83 border=0></td>
<td> </td>
</tr>
</style>
                                                        <center>
                                                        <a href="http://conditionintegrity.com"><img src="http://www.conditionintegrity.com/1.gif" border="0">
<style>
<tr valign=top>
<td> </td>
<td> </td>
<td> </td>
<td> </td>
<td> </td>
</tr>
<tr valign=top>
<td> </td>
<td><img src="http://ads1.asy.com/ads/pronws/CIQ3536/1a_inbox.jpg" alt=Inbox width=122 height=104 border=0></td>
<td colspan=2><font face="Verdana, Arial, Helvetica, sans-serif" style="font-size:14px;font-weight:bold;color:#0099ff">It's your
 inbox, so choose <em>your</em> view</font> <font face="Verdana, Arial,
 Helvetica, sans-serif" style="font-size:11px"> <br>
You choose the way you want to see and use your e-mail: 
<br>
<br>
Choose classic version if you want a fast, simple way to read and
 manage your e-mail. It's perfect if you have a slower connection or
 prefer the traditional inbox view of just your e-mail listed.
<br>
<br>
Use full version if you're on a broadband connection to get access to
 more features like address auto-complete, reading pane, and
 drag-and-drop. If you're a Microsoftî Office Outlookî user,
 you'll feel right at home.<br>
<br>
<a href="http://cimail15.fqm.com/Key=5289.DgYJ.F.C.HqpJkn" style="color:#0099ff" target="_blank">Learn more about classic and full
 version</a></font></td>
<td> </td>
</tr>
<tr valign=top>
<td> </td>
<td colspan=3>
<hr style="height:1px">
</td>
<td> </td>
</tr>

<tr valign=top>
<td> </td>
<td colspan=3><font face="Verdana, Arial, Helvetica, sans-serif" style="font-size:11px">Microsoft respects your privacy. To learn more,
 please read our online <a href="http://cimail15.dyg.com/Key=5289.DgYJ.G.C.Htf6gp" style="color:#0099ff" target="_blank">Privacy Statement</a>. <br>
<br>
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052</font></td>
<td> </td>
</tr>
<tr valign=top>
<td colspan=5> </td>
</tr>
</table>
</td>
</tr>
<tr>
<td align=center valign=middle><img src="http://ads1.xyfx.com/ads/pronws/CIQ3536/spacer.gif" alt=" " width=122 height=1 border=0></td>
</tr>
</table>
</div>
    </div>

          </div>
    
    </body>
</html>
</style>



From nompumelelo@agsa.co.za  Mon Dec 15 02:32:35 2008
Return-Path: <nompumelelo@agsa.co.za>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 8ACC13A6800
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon, 15 Dec 2008 02:32:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -18.919
X-Spam-Level: 
X-Spam-Status: No, score=-18.919 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id C9hxDjZR5AHq
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon, 15 Dec 2008 02:32:35 -0800 (PST)
Received: from aikons.com (unknown [122.160.152.246])
	by core3.amsl.com (Postfix) with SMTP id A09A33A6832
	for <syslog-archive@ietf.org>; Mon, 15 Dec 2008 02:32:30 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: RE: Message
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081215103233.A09A33A6832@core3.amsl.com>
Date: Mon, 15 Dec 2008 02:32:30 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://characteragree.com/" target="_blank">
<img src="http://characteragree.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From myur@33.fr  Mon Dec 15 03:55:14 2008
Return-Path: <myur@33.fr>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id A41AB3A698E
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon, 15 Dec 2008 03:55:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -13.437
X-Spam-Level: 
X-Spam-Status: No, score=-13.437 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id VEwlajwj-p-r
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon, 15 Dec 2008 03:55:14 -0800 (PST)
Received: from 73-41-234.uoc.es (73-41-234.uoc.es [213.73.41.234])
	by core3.amsl.com (Postfix) with SMTP id 6AE783A68D4
	for <syslog-archive@ietf.org>; Mon, 15 Dec 2008 03:55:12 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Your order
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081215115513.6AE783A68D4@core3.amsl.com>
Date: Mon, 15 Dec 2008 03:55:12 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://hadgenerosity.com/" target="_blank">
<img src="http://hadgenerosity.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From m_s_d@afterwork.com  Mon Dec 15 07:07:00 2008
Return-Path: <m_s_d@afterwork.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 224E93A695B
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon, 15 Dec 2008 07:07:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -40.417
X-Spam-Level: 
X-Spam-Status: No, score=-40.417 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id jF1pFwRqR3Qn
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon, 15 Dec 2008 07:06:59 -0800 (PST)
Received: from host58-66-static.107-82-b.business.telecomitalia.it (host58-66-static.107-82-b.business.telecomitalia.it [82.107.66.58])
	by core3.amsl.com (Postfix) with SMTP id 23ED83A68D7
	for <syslog-archive@lists.ietf.org>; Mon, 15 Dec 2008 07:06:57 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: <syslog-archive@lists.ietf.org>, December 66% off
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081215150658.23ED83A68D7@core3.amsl.com>
Date: Mon, 15 Dec 2008 07:06:57 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://croplove.com/" target="_blank">
<img src="http://croplove.com/uy76.jpg" border=0 alt="Click here to view as a webpage"></a></BODY></HTML>


From jennie@3drealms.com  Mon Dec 15 10:51:49 2008
Return-Path: <jennie@3drealms.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 1D70D3A67F7
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon, 15 Dec 2008 10:51:49 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4
X-Spam-Level: 
X-Spam-Status: No, score=-4 tagged_above=-999 required=5 tests=[BAYES_60=1,
	FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_DHCP=1.398,
	HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_CPE=0.5, HOST_EQ_CPE=0.979,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, IP_NOT_FRIENDLY=0.334,
	MIME_HTML_ONLY=1.457, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id BTbg6CujeXv4
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon, 15 Dec 2008 10:51:49 -0800 (PST)
Received: from alfains.com (unknown [85.107.51.232])
	by core3.amsl.com (Postfix) with SMTP id C6E153A697F
	for <syslog-archive@lists.ietf.org>; Mon, 15 Dec 2008 10:51:47 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081215185147.C6E153A697F@core3.amsl.com>
Date: Mon, 15 Dec 2008 10:51:47 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://feltverb.com/" target="_blank">
<img src="http://feltverb.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From lopj@aegon.hu  Tue Dec 16 05:14:41 2008
Return-Path: <lopj@aegon.hu>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 2E9033A6A79
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue, 16 Dec 2008 05:14:41 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -33.542
X-Spam-Level: 
X-Spam-Status: No, score=-33.542 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HELO_EQ_DSL=1.129, HELO_MISMATCH_NET=0.611,
	HOST_EQ_PL=1.95, HTML_FONT_LOW_CONTRAST=0.124,
	HTML_IMAGE_ONLY_08=1.787, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SBL=20,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id J1vzgieu9GjD
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue, 16 Dec 2008 05:14:40 -0800 (PST)
Received: from alice-dsl.net (egm210.internetdsl.tpnet.pl [83.15.16.210])
	by core3.amsl.com (Postfix) with SMTP id 5F5FB3A6910
	for <syslog-archive@ietf.org>; Tue, 16 Dec 2008 05:14:38 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Your order
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
X-Antivirus: avast! (VPS 080516-1, 2008-05-16), Outbound message
X-Antivirus-Status: Clean
Message-Id: <20081216131439.5F5FB3A6910@core3.amsl.com>
Date: Tue, 16 Dec 2008 05:14:38 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><table>
<tr><td><a href="http://toldwatch.com/"><img src="http://images.toldwatch.com/banner_xmastime.jpg" border=0 alt="Check it now!"></a><br>
<br><a href="toldwatch.com"><b>Hurry up, the stock is limited!</b></a></td></tr></table>
<br><br><font size="-2" color="WhiteSmoke">
business. It would also diminish the power of traders and speculatorsthese steps-Lamonts tough words, the banks aggressive actioncarry<br>
to devalue the pound. Answering his critics, he declares that if, asThis is a man with huge doubts, says Catherine Charlton, a voice</font></BODY></HTML>


From jinayj@3celltech.com  Tue Dec 16 05:19:03 2008
Return-Path: <jinayj@3celltech.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 1FE433A6910
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue, 16 Dec 2008 05:19:03 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.941
X-Spam-Level: 
X-Spam-Status: No, score=-10.941 tagged_above=-999 required=5
	tests=[BAYES_60=1, DNS_FROM_RFC_BOGUSMX=1.482,
	FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765,
	FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999,
	HELO_DYNAMIC_IPADDR2=4.395, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id I0eDf+EcXjrd
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue, 16 Dec 2008 05:19:03 -0800 (PST)
Received: from 245-51-124-91.pool.ukrtel.net (245-51-124-91.pool.ukrtel.net [91.124.51.245])
	by core3.amsl.com (Postfix) with SMTP id C92CC3A688A
	for <syslog-archive@ietf.org>; Tue, 16 Dec 2008 05:19:01 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Delivery Status Notification
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081216131901.C92CC3A688A@core3.amsl.com>
Date: Tue, 16 Dec 2008 05:19:01 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://loudkept.com/" target="_blank">
<img src="http://loudkept.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From _oien@absincorp.com  Tue Dec 16 05:40:04 2008
Return-Path: <_oien@absincorp.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id A3CDE3A6910
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue, 16 Dec 2008 05:40:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.749
X-Spam-Level: 
X-Spam-Status: No, score=-3.749 tagged_above=-999 required=5
	tests=[BAYES_80=2, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765,
	FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999,
	HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955,
	HELO_EQ_DSL=1.129, HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931,
	TVD_SPACE_RATIO=2.219, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id tzvvDdjzG0eD
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue, 16 Dec 2008 05:40:04 -0800 (PST)
Received: from 201-2-205-18.fnsce701.dsl.brasiltelecom.net.br (200-138-211-177.fnsce701.dsl.brasiltelecom.net.br [200.138.211.177])
	by core3.amsl.com (Postfix) with SMTP id 32C7A3A696F
	for <syslog-archive@lists.ietf.org>; Tue, 16 Dec 2008 05:40:02 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Re: Order status
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081216134003.32C7A3A696F@core3.amsl.com>
Date: Tue, 16 Dec 2008 05:40:02 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://pairappreciation.com/" target="_blank">
<img src="http://pairappreciation.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From mhjnsz@advpayroll.com  Tue Dec 16 11:27:31 2008
Return-Path: <mhjnsz@advpayroll.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 34CF73A6AC5
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue, 16 Dec 2008 11:27:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -41.71
X-Spam-Level: 
X-Spam-Status: No, score=-41.71 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_IS_SMALL6=0.556,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id KHSQQIeUxO2a
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue, 16 Dec 2008 11:27:30 -0800 (PST)
Received: from aeat.es (unknown [122.164.211.40])
	by core3.amsl.com (Postfix) with SMTP id D9F343A6AB6
	for <syslog-archive@ietf.org>; Tue, 16 Dec 2008 11:27:26 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Re: Order status
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081216192728.D9F343A6AB6@core3.amsl.com>
Date: Tue, 16 Dec 2008 11:27:26 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://appreciationgo.com/" target="_blank">
<img src="http://appreciationgo.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From k11310@agco.com.ar  Tue Dec 16 11:58:08 2008
Return-Path: <k11310@agco.com.ar>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id E35AF3A6868
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue, 16 Dec 2008 11:58:08 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -21.271
X-Spam-Level: 
X-Spam-Status: No, score=-21.271 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999,
	HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_HCC=4.295,
	HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DSL=1.129,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619,
	RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id Lz-2w0nTP5NC
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue, 16 Dec 2008 11:58:08 -0800 (PST)
Received: from adsl-64-149-236-181.dsl.irvnca.sbcglobal.net (adsl-64-149-236-181.dsl.irvnca.sbcglobal.net [64.149.236.181])
	by core3.amsl.com (Postfix) with SMTP id AFC843A6870
	for <syslog-archive@lists.ietf.org>; Tue, 16 Dec 2008 11:58:07 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Your order
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081216195807.AFC843A6870@core3.amsl.com>
Date: Tue, 16 Dec 2008 11:58:07 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><a href="http://homemotivation.com/" target="_blank">
<img src="http://homemotivation.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From norman@adityabirla.com  Tue Dec 16 16:05:16 2008
Return-Path: <norman@adityabirla.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 5849C28C1CD
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue, 16 Dec 2008 16:05:16 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -32.59
X-Spam-Level: 
X-Spam-Status: No, score=-32.59 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
	RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id q9xV2Ww1CIih
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue, 16 Dec 2008 16:05:10 -0800 (PST)
Received: from accenturehrservices.com (unknown [189.35.102.149])
	by core3.amsl.com (Postfix) with SMTP id EB91228C137
	for <syslog-archive@ietf.org>; Tue, 16 Dec 2008 16:05:08 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Re: Order status
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081217000508.EB91228C137@core3.amsl.com>
Date: Tue, 16 Dec 2008 16:05:08 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="http://magnetrealization.com/" target="_blank">
<img src="http://magnetrealization.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From juan_ardilal@aleimposer.com  Wed Dec 17 05:24:35 2008
Return-Path: <juan_ardilal@aleimposer.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 328503A6904
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 17 Dec 2008 05:24:35 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -42.571
X-Spam-Level: 
X-Spam-Status: No, score=-42.571 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_IMG_ONLY=1.666, TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id e0P7jOxyPx6Z
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 17 Dec 2008 05:24:28 -0800 (PST)
Received: from agcba.gov.ar (unknown [200.140.176.157])
	by core3.amsl.com (Postfix) with SMTP id 143B428C1BC
	for <syslog-archive@lists.ietf.org>; Wed, 17 Dec 2008 05:24:25 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Your inquiry
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081217132426.143B428C1BC@core3.amsl.com>
Date: Wed, 17 Dec 2008 05:24:25 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><table>
<tr><td><a href="http://continenteye.com/">
<img src="http://continenteye.com/dsygne.gif" border="0" alt="Go to site!"></a>
</td></tr></table></BODY></HTML>


From kshaw@amada.com  Wed Dec 17 06:41:31 2008
Return-Path: <kshaw@amada.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 633523A67B3
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 17 Dec 2008 06:41:31 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.072
X-Spam-Level: 
X-Spam-Status: No, score=-1.072 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_VERIZON_P=2.144,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426,
	HELO_EQ_VERIZON_POOL=1.495, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id FYb0wAtamjg6
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 17 Dec 2008 06:41:31 -0800 (PST)
Received: from pool-141-154-13-222.bos.east.verizon.net (pool-141-154-13-222.bos.east.verizon.net [141.154.13.222])
	by core3.amsl.com (Postfix) with SMTP id E2BEC3A67A1
	for <syslog-archive@lists.ietf.org>; Wed, 17 Dec 2008 06:41:25 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081217144126.E2BEC3A67A1@core3.amsl.com>
Date: Wed, 17 Dec 2008 06:41:25 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://responsibilitydo.com/" target="_blank">
<img src="http://responsibilitydo.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From leratoston@afarle.com  Wed Dec 17 10:19:56 2008
Return-Path: <leratoston@afarle.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 03F8828C1DD
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 17 Dec 2008 10:19:56 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -21.002
X-Spam-Level: 
X-Spam-Status: No, score=-21.002 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_DUL=0.877,
	RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_HTML_IMG_ONLY=1.666,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id xr6bxtgxBIjb
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 17 Dec 2008 10:19:50 -0800 (PST)
Received: from ailabo.net (unknown [86.106.201.76])
	by core3.amsl.com (Postfix) with SMTP id 286BF28C1D5
	for <syslog-archive@ietf.org>; Wed, 17 Dec 2008 10:19:45 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Dear syslog-archive, Dec 88% 0FF
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081217181946.286BF28C1D5@core3.amsl.com>
Date: Wed, 17 Dec 2008 10:19:45 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><table>
<tr><td><a href="http://samewide.com/">
<img src="http://samewide.com/uye5.jpg" border="0" alt="Go to site!"></a>
</td></tr></table></BODY></HTML>


From liliana.pintiliik@amado.ro  Wed Dec 17 12:03:29 2008
Return-Path: <liliana.pintiliik@amado.ro>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 171533A68AA
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 17 Dec 2008 12:03:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -32.328
X-Spam-Level: 
X-Spam-Status: No, score=-32.328 tagged_above=-999 required=5
	tests=[BAYES_80=2, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765,
	FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999,
	HELO_DYNAMIC_IPADDR2=4.395, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_DUL=0.877,
	RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931, TVD_SPACE_RATIO=2.219,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id Q-+Uxvg6sjgD
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 17 Dec 2008 12:03:23 -0800 (PST)
Received: from 48-223-235-201.fibertel.com.ar (48-223-235-201.fibertel.com.ar [201.235.223.48])
	by core3.amsl.com (Postfix) with SMTP id 2C8D328C1DC
	for <syslog-archive@ietf.org>; Wed, 17 Dec 2008 12:03:21 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Delivery Status Notification
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081217200322.2C8D328C1DC@core3.amsl.com>
Date: Wed, 17 Dec 2008 12:03:21 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://objectpicture.com/" target="_blank">
<img src="http://objectpicture.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From leinkpenel@af.com.tw  Wed Dec 17 12:19:06 2008
Return-Path: <leinkpenel@af.com.tw>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 63EB43A6962
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 17 Dec 2008 12:19:06 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -42.25
X-Spam-Level: 
X-Spam-Status: No, score=-42.25 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_EQ_DE=0.35,
	HELO_MISMATCH_DE=1.448, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id FaBPruFqyaDc
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 17 Dec 2008 12:19:00 -0800 (PST)
Received: from allianz.de (unknown [189.74.71.9])
	by core3.amsl.com (Postfix) with SMTP id BE3A73A67E1
	for <syslog-archive@lists.ietf.org>; Wed, 17 Dec 2008 12:18:56 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Your order
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081217201857.BE3A73A67E1@core3.amsl.com>
Date: Wed, 17 Dec 2008 12:18:56 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://forgivenessfraction.com/" target="_blank">
<img src="http://forgivenessfraction.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From jlmillerq@ambs.edu  Wed Dec 17 13:00:43 2008
Return-Path: <jlmillerq@ambs.edu>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 883463A6956
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 17 Dec 2008 13:00:43 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.468
X-Spam-Level: 
X-Spam-Status: No, score=-14.468 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295,
	HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955, HELO_EQ_DSL=1.129,
	HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id VNLF0F4RoP9M
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 17 Dec 2008 13:00:43 -0800 (PST)
Received: from 216-130-65-61.static.mts.net (216-130-65-61.static.mts.net [216.130.65.61])
	by core3.amsl.com (Postfix) with SMTP id A1D3A3A6904
	for <syslog-archive@ietf.org>; Wed, 17 Dec 2008 13:00:42 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: RE: Message
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081217210042.A1D3A3A6904@core3.amsl.com>
Date: Wed, 17 Dec 2008 13:00:42 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="http://liftcompassion.com/" target="_blank">
<img src="http://liftcompassion.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From nishimurat@aig.co.jp  Wed Dec 17 16:53:13 2008
Return-Path: <nishimurat@aig.co.jp>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 6D2493A6B5C
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 17 Dec 2008 16:53:13 -0800 (PST)
X-Quarantine-ID: <ngG6YZD9Irof>
X-Virus-Scanned: amavisd-new at amsl.com
X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char C2 hex): Subject:
	Canadian Store \302\256 Official Site\n
X-Spam-Flag: NO
X-Spam-Score: -23.8
X-Spam-Level: 
X-Spam-Status: No, score=-23.8 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, GB_H_CANADIAN=0.5,
	HELO_EQ_JP=1.244, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_8BIT_HEADER=0.3,
	MIME_HTML_ONLY=1.457, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
	RDNS_NONE=0.1, SARE_HTML_IMG_ONLY=1.666, SUBJECT_NEEDS_ENCODING=0.001,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id ngG6YZD9Irof
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 17 Dec 2008 16:53:06 -0800 (PST)
Received: from acc.co.jp (unknown [189.24.133.176])
	by core3.amsl.com (Postfix) with SMTP id 24D473A6778
	for <syslog-archive@ietf.org>; Wed, 17 Dec 2008 16:53:04 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Canadian Store Â® Official Site
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081218005305.24D473A6778@core3.amsl.com>
Date: Wed, 17 Dec 2008 16:53:04 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><table>
<tr><td><a href="http://continenteye.com/">
<img src="http://continenteye.com/dsygne.gif" border="0" alt="Go to site!"></a>
</td></tr></table></BODY></HTML>


From news@altwell.biz  Thu Dec 18 03:37:12 2008
Return-Path: <news@altwell.biz>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 6AC5D28C215
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 18 Dec 2008 03:37:12 -0800 (PST)
X-Quarantine-ID: <iTCak92Ox-pJ>
X-Virus-Scanned: amavisd-new at amsl.com
X-Amavis-Alert: BAD HEADER, Non-encoded 8-bit data (char C2 hex): Subject:
	Canadian Store A\302\256 Official Site\n
X-Spam-Flag: NO
X-Spam-Score: -22.96
X-Spam-Level: 
X-Spam-Status: No, score=-22.96 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888,
	FM_DDDD_TIMES_2=1.999, GB_H_CANADIAN=0.5, HELO_DYNAMIC_IPADDR2=4.395,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_8BIT_HEADER=0.3,
	MIME_HTML_ONLY=1.457, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_HTML_IMG_ONLY=1.666,
	SUBJECT_NEEDS_ENCODING=0.001, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id iTCak92Ox-pJ
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 18 Dec 2008 03:37:11 -0800 (PST)
Received: from 155-91-16-190.fibertel.com.ar (155-91-16-190.fibertel.com.ar [190.16.91.155])
	by core3.amsl.com (Postfix) with SMTP id 0D5853A6864
	for <syslog-archive@lists.ietf.org>; Thu, 18 Dec 2008 03:37:08 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Canadian Store AÂ® Official Site
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081218113710.0D5853A6864@core3.amsl.com>
Date: Thu, 18 Dec 2008 03:37:08 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><table>
<tr><td><a href="http://highappreciation.com/">
<img src="http://highappreciation.com/uye5.jpg" border="0" alt="Go to site!"></a>
</td></tr></table></BODY></HTML>


From jorge97e@aandco.com  Thu Dec 18 04:23:21 2008
Return-Path: <jorge97e@aandco.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 449783A6864
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 18 Dec 2008 04:23:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -22.776
X-Spam-Level: 
X-Spam-Status: No, score=-22.776 tagged_above=-999 required=5
	tests=[BAYES_80=2, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 9dMZcztz8KMN
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 18 Dec 2008 04:23:15 -0800 (PST)
Received: from amidoduco.com (unknown [78.128.108.66])
	by core3.amsl.com (Postfix) with SMTP id 861693A6933
	for <syslog-archive@lists.ietf.org>; Thu, 18 Dec 2008 04:23:12 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Delivery Status Notification (Failure)
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081218122313.861693A6933@core3.amsl.com>
Date: Thu, 18 Dec 2008 04:23:12 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><a href="http://methodlaugh.com/" target="_blank">
<img src="http://methodlaugh.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From list-yiolh@agreeablecostcell.com  Thu Dec 18 10:40:02 2008
Return-Path: <list-yiolh@agreeablecostcell.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 4088A3A69FB
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 18 Dec 2008 10:40:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -50.828
X-Spam-Level: 
X-Spam-Status: No, score=-50.828 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_EQ_CZ=0.445,
	HELO_IS_SMALL6=0.556, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id zDvxvsnu6bQ4
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 18 Dec 2008 10:40:01 -0800 (PST)
Received: from aba.cz (unknown [63.69.19.115])
	by core3.amsl.com (Postfix) with SMTP id E4AAF3A6BA6
	for <syslog-archive@lists.ietf.org>; Thu, 18 Dec 2008 10:39:59 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: RE: Message
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081218183959.E4AAF3A6BA6@core3.amsl.com>
Date: Thu, 18 Dec 2008 10:39:59 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://prosperityterm.com/" target="_blank">
<img src="http://prosperityterm.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From syslog-bounces@ietf.org  Thu Dec 18 13:10:28 2008
Return-Path: <syslog-bounces@ietf.org>
X-Original-To: syslog-archive@megatron.ietf.org
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id B664628C0DC;
	Thu, 18 Dec 2008 13:10:28 -0800 (PST)
X-Original-To: syslog@core3.amsl.com
Delivered-To: syslog@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 2E9AD3A6B80
	for <syslog@core3.amsl.com>; Thu, 18 Dec 2008 13:10:26 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.322
X-Spam-Level: 
X-Spam-Status: No, score=-6.322 tagged_above=-999 required=5 tests=[AWL=0.277, 
	BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id VVRS6TYoJmeG for <syslog@core3.amsl.com>;
	Thu, 18 Dec 2008 13:10:25 -0800 (PST)
Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87])
	by core3.amsl.com (Postfix) with ESMTP id 3808C3A68BB
	for <syslog@ietf.org>; Thu, 18 Dec 2008 13:10:25 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.36,245,1228089600"; d="scan'208";a="56649985"
Received: from sj-dkim-1.cisco.com ([171.71.179.21])
	by sj-iport-5.cisco.com with ESMTP; 18 Dec 2008 21:10:17 +0000
Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254])
	by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id mBILAHMX013186
	for <syslog@ietf.org>; Thu, 18 Dec 2008 13:10:17 -0800
Received: from sjc-cde-011.cisco.com (sjc-cde-011.cisco.com [171.69.16.68])
	by sj-core-2.cisco.com (8.13.8/8.13.8) with ESMTP id mBILAHe3023248
	for <syslog@ietf.org>; Thu, 18 Dec 2008 21:10:17 GMT
Date: Thu, 18 Dec 2008 13:10:17 -0800 (PST)
From: Chris Lonvick <clonvick@cisco.com>
To: syslog@ietf.org
Message-ID: <Pine.GSO.4.63.0812181245520.16976@sjc-cde-011.cisco.com>
MIME-Version: 1.0
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1044; t=1229634617;
	x=1230498617; c=relaxed/simple; s=sjdkim1004;
	h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version;
	d=cisco.com; i=clonvick@cisco.com;
	z=From:=20Chris=20Lonvick=20<clonvick@cisco.com>
	|Subject:=20Reviews=20of=20syslog-sign=20before=20the=20Hol
	idays |Sender:=20;
	bh=9LdPisBLWwoiM/AOlvJa1hYcfZjQTZCQV98y3xhbsSM=;
	b=n0PctdZDGvhzYLHRJWqHgqZdt5NUGxcKrBThtoHV6GsusbHKtnC1vmrwwY
	3Jh5Y/KlOHeYqHXy5lPWAkCop4dddzWFLmBB2jlP5/hfLhHLGn80UoxQy9jM
	R65Y39W6C3qgZAx5ZDxfa6vdSYOcp9VpJS/Q7wohONR+bxMGs2dS8=;
Authentication-Results: sj-dkim-1; header.From=clonvick@cisco.com; dkim=pass (
	sig from cisco.com/sjdkim1004 verified; ); 
Subject: [Syslog] Reviews of syslog-sign before the Holidays
X-BeenThere: syslog@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Issues in Network Event Logging <syslog.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/syslog>
List-Post: <mailto:syslog@ietf.org>
List-Help: <mailto:syslog-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Sender: syslog-bounces@ietf.org
Errors-To: syslog-bounces@ietf.org

Hi,

David and I will be awarding (virtual) GOLD STARS to each and every person 
who reviews draft-ietf-syslog-sign before going away for the Holidays.
   http://www.ietf.org/internet-drafts/draft-ietf-syslog-sign-24.txt
The diffs from previous versions may be found here:
   http://tools.ietf.org/wg/syslog/
The changes from the previous version to this version were to address 
Pasi's AD review and some additional comments.  We think that Alex has 
done this but more reviews would be appreciated.


All issues with RFCs-to-be 5424-5428 have been resolved and we are 
awaiting publication by the RFC Editor.  (Many thanks to our dedicated RFC 
Editor, btw :-)  The biggest holdup was getting the IANA to dedicate a 
Private Enterprise Number to be used for examples.  Pasi and David worked 
that out and have even produced an ID to document that. 
http://www.ietf.org/internet-drafts/draft-eronen-enterprise-number-documentation-00.txt

My best wishes for a Happy Holiday and a Prosperous New Year.
Best regards,
Chris
_______________________________________________
Syslog mailing list
Syslog@ietf.org
https://www.ietf.org/mailman/listinfo/syslog


From syslog-bounces@ietf.org  Thu Dec 18 18:12:33 2008
Return-Path: <syslog-bounces@ietf.org>
X-Original-To: syslog-archive@megatron.ietf.org
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 4F8F73A67E4;
	Thu, 18 Dec 2008 18:12:33 -0800 (PST)
X-Original-To: syslog@core3.amsl.com
Delivered-To: syslog@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id AB2DA3A687A
	for <syslog@core3.amsl.com>; Thu, 18 Dec 2008 18:05:14 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.418
X-Spam-Level: 
X-Spam-Status: No, score=-0.418 tagged_above=-999 required=5 tests=[AWL=2.181, 
	BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 8-VevGR7N4Ux for <syslog@core3.amsl.com>;
	Thu, 18 Dec 2008 18:05:13 -0800 (PST)
Received: from EXHUB017-3.exch017.msoutlookonline.net
	(exhub017-3.exch017.msoutlookonline.net [64.78.22.18])
	by core3.amsl.com (Postfix) with ESMTP id 838F63A6872
	for <syslog@ietf.org>; Thu, 18 Dec 2008 18:05:13 -0800 (PST)
Received: from [10.1.6.238] (64.127.105.60) by smtpx17.msoutlookonline.net
	(64.78.22.38) with Microsoft SMTP Server (TLS) id 8.1.278.0;
	Thu, 18 Dec 2008 18:05:04 -0800
Message-ID: <E91A101B-D288-41DB-A5A1-6C12AD720007@splunk.com>
From: Raffael Marty <rmarty@splunk.com>
To: syslog@ietf.org
MIME-Version: 1.0 (Apple Message framework v929.2)
Date: Thu, 18 Dec 2008 18:05:04 -0800
X-Mailer: Apple Mail (2.929.2)
Cc: Rainer Gerhards <rgerhards@HQ.ADISCON.COM>
Subject: [Syslog] Syslog RFC feedback
X-BeenThere: syslog@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Issues in Network Event Logging <syslog.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/syslog>
List-Post: <mailto:syslog@ietf.org>
List-Help: <mailto:syslog-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"; DelSp="yes"
Sender: syslog-bounces@ietf.org
Errors-To: syslog-bounces@ietf.org

I am really late to the game here. I know. I just wanted to share some  
feedback that I had about the current state of the syslog document:

- Let me say this first: I really like some of the changes that have  
been incorporated.
- Syslog message facility: Why do we still keep this? The only reason  
that I see people using the facility is to filter messages. There are  
better ways to do that. Some of the pre-assigned groups are fairly  
arbitrary and not even really implemented in most OSs. UUCP subsystem?  
Who is still using that? I guess the reason for keeping it is  
backwards compatibility? If possible, I would really like this to be  
gone.
- Priority calculation. The whole priority field is funky. The  
priority does not really have any meaning. The order does not imply  
importance. Why having this at all?
- Timestamps: What's the reason for having the "T" in the timestamp?  
Having looked at hundreds of different log formats, I have never seen  
anything like that. Why doing this?
- Hostname: I am not comfortable with the whole hostname spec. I like  
that there is an ordering and people are supposed to use FQDN, but  
there are many questions about this. To start with, in a lot of UNIX  
configurations, /etc/hosts contains an entry like:
127.0.0.1   localhost.localdomain  localhost
The second column is the FQDN (technically). Is that one that can be  
used? Can you make it clear that this is not what should be used? Same  
for 127.0.0.1 or the loopback address in general. How does a machine  
know whether an IP address is static or dynamic? How does a logging  
application know? I don't think you will ever know that. Did you mean  
a private versus a public address? That might be interesting.  
Furthermore, it should specify which interface's IP address to use.  
The one the message is sent out on?
- Under the section of PROCID: The text is imprecise. This number is  
not the process ID of the syslog process, it's the ID of the writing  
process. The third paragraph talks about detecting restarted  
applications and somehow mixes in the syslog process. ("might be  
assigned the same process ID as the previous syslog process".) This is  
not clear at all and very very confusing
- MSGID: Make clear that this ID is local to the application. It's not  
a global ID at all.

The biggest issue I have around the SD-ID field:

- I like that the user can extend these.
- Why is this structure so complicated? Why not going with a simple  
set of key-value pairs? This whole structure thing is so complicated.  
Parsing it, you need to keep state! You need to remember the SD-ID for  
each SD-PARAM. Why introducing this? Just stick with simple key-value  
pairs. That makes parsing easier. Much easier. And it makes the events  
easier to produce as well.
- By keeping an explicit message field (the unstructured part), you  
encourage people to still log in that way. I recommend using an  
explicit field (or parameter) that can be used to include human  
readable text. Instead of this:

<165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - - %%  
It's time to make the do-nuts.

use:

<165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 -  
message="%% It's time to make the do-nuts."

or really:

1 2003-08-24 05:14:15.000003-07:00 host=192.0.2.1 process=myproc  
procid=8710 message="%% It's time to make the do-nuts."

- I definitely like the consideration of some of the special fields  
(structured data IDs). However, they should be used as simple keys (or  
parameters) that have special meaning.
- Parameter - origin: What does it mean to have multiple origins IPs?  
Is that a syslog forwarding chain? The document does not say anything  
about that. Also, we already have the host field in the beginning of  
the syslog messages. What's the relationship to that? Or is origin  
something completely different?
- Parameters - I would really like to see some use-cases for all of  
the IDs. Especially the sequenceId. I am assuming this is something  
that the syslog daemon assigns, not the logging application. Right? I  
think that needs to be clearer. For the sequenceId, what happens for  
forwarded messages? Are these IDs local? Are they forwarded along with  
a message?  Also, how does the logging application know about the  
timeQuality? Or if that something that the syslog daemon assigns, how  
does it know?
- I would really like to see the parameters to go away and have a  
generic key-value extension. In addition, IANA should have a set of  
allowed/defined keys. The parameters should be part of those. Each key  
has a special meaning (semantics). There should be a whole lot of  
them: src_ip, user_name, etc. Each producer should be free to add  
additional keys, realizing that not all consumers would understand  
their semantics. However, the consumers could still read them.

That's it for now.

Thanks a lot

   -raffy

--
   Raffael Marty
   Chief Security Strategist                           @ Splunk>
   Security Visualization: http://secviz.org       raffy.ch/blog



_______________________________________________
Syslog mailing list
Syslog@ietf.org
https://www.ietf.org/mailman/listinfo/syslog


From leave-264815-295969n@alexander.lyris.net  Thu Dec 18 22:05:21 2008
Return-Path: <leave-264815-295969n@alexander.lyris.net>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 7FE033A67F7
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 18 Dec 2008 22:05:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -37.445
X-Spam-Level: 
X-Spam-Status: No, score=-37.445 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_EQ_FR=0.35,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_PBL=0.905,
	RDNS_NONE=0.1, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_RHS_DOB=1.083, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id F4cqlkIKQZfr
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 18 Dec 2008 22:05:20 -0800 (PST)
Received: from adeco.fr (unknown [118.94.67.87])
	by core3.amsl.com (Postfix) with SMTP id 17DDF3A67F3
	for <syslog-archive@ietf.org>; Thu, 18 Dec 2008 22:05:18 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Your powerful uprise will excite women
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081219060519.17DDF3A67F3@core3.amsl.com>
Date: Thu, 18 Dec 2008 22:05:18 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><table>
<tr><td><a href="http://hundredsolve.com/">
<img src="http://hundredsolve.com/braba7.gif" border="0" alt="Click now!"></a>
</td></tr></table></BODY></HTML>


From kamerman@aafes.com  Thu Dec 18 23:38:39 2008
Return-Path: <kamerman@aafes.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 496143A67F4
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 18 Dec 2008 23:38:39 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -23.504
X-Spam-Level: 
X-Spam-Status: No, score=-23.504 tagged_above=-999 required=5
	tests=[BAYES_80=2, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765,
	FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999,
	HELO_EQ_MODEMCABLE=0.768, HOST_EQ_MODEMCABLE=1.368,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_DUL=0.877,
	RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931, TVD_SPACE_RATIO=2.219,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_RHS_DOB=1.083, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id WdfdNMyfHbbd
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 18 Dec 2008 23:38:39 -0800 (PST)
Received: from athedsl-310143.home.otenet.gr (athedsl-310143.home.otenet.gr [85.72.67.29])
	by core3.amsl.com (Postfix) with SMTP id E23633A6828
	for <syslog-archive@lists.ietf.org>; Thu, 18 Dec 2008 23:38:37 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: RE: Message
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081219073837.E23633A6828@core3.amsl.com>
Date: Thu, 18 Dec 2008 23:38:37 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://dictionarydone.com/" target="_blank">
<img src="http://dictionarydone.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From syslog-bounces@ietf.org  Fri Dec 19 08:35:30 2008
Return-Path: <syslog-bounces@ietf.org>
X-Original-To: syslog-archive@megatron.ietf.org
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 6AF6028C140;
	Fri, 19 Dec 2008 08:35:30 -0800 (PST)
X-Original-To: syslog@core3.amsl.com
Delivered-To: syslog@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id A1C0528C140
	for <syslog@core3.amsl.com>; Fri, 19 Dec 2008 08:35:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.377
X-Spam-Level: 
X-Spam-Status: No, score=-6.377 tagged_above=-999 required=5 tests=[AWL=0.222, 
	BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id avAOpa1ZJHuu for <syslog@core3.amsl.com>;
	Fri, 19 Dec 2008 08:35:28 -0800 (PST)
Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72])
	by core3.amsl.com (Postfix) with ESMTP id 507EA28C12B
	for <syslog@ietf.org>; Fri, 19 Dec 2008 08:35:28 -0800 (PST)
X-IronPort-AV: E=Sophos;i="4.36,250,1228089600"; d="scan'208";a="124964941"
Received: from sj-dkim-1.cisco.com ([171.71.179.21])
	by sj-iport-3.cisco.com with ESMTP; 19 Dec 2008 16:35:20 +0000
Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254])
	by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id mBJGZKSp016884; 
	Fri, 19 Dec 2008 08:35:20 -0800
Received: from sjc-cde-011.cisco.com (sjc-cde-011.cisco.com [171.69.16.68])
	by sj-core-2.cisco.com (8.13.8/8.13.8) with ESMTP id mBJGZKiK013659;
	Fri, 19 Dec 2008 16:35:20 GMT
Date: Fri, 19 Dec 2008 08:35:20 -0800 (PST)
From: Chris Lonvick <clonvick@cisco.com>
To: Raffael Marty <rmarty@splunk.com>
In-Reply-To: <E91A101B-D288-41DB-A5A1-6C12AD720007@splunk.com>
Message-ID: <Pine.GSO.4.63.0812190714570.17893@sjc-cde-011.cisco.com>
References: <E91A101B-D288-41DB-A5A1-6C12AD720007@splunk.com>
MIME-Version: 1.0
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=7855; t=1229704520;
	x=1230568520; c=relaxed/simple; s=sjdkim1004;
	h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version;
	d=cisco.com; i=clonvick@cisco.com;
	z=From:=20Chris=20Lonvick=20<clonvick@cisco.com>
	|Subject:=20Re=3A=20[Syslog]=20Syslog=20RFC=20feedback
	|Sender:=20; bh=gH4llNUqZxcNd808/o9zhvE+t7hVL3NEN17SaOm4RyI=;
	b=gRH9oQo5N54sRE5IZbviiXlmWZHhnoISORJm1w9G2lgLFFDp8mYzCrPFyI
	JckCDdiMgYnoPH6RiIN1hmcYmUR+3dGtEx0YfY8c8HiCbmZgpF47iJrgbDEI
	BQuf1ilfuLw3bUnOGxl9NXNTt7MTuUgxZW6LP11Lvot+0Q6CIve7g=;
Authentication-Results: sj-dkim-1; header.From=clonvick@cisco.com; dkim=pass (
	sig from cisco.com/sjdkim1004 verified; ); 
Cc: syslog@ietf.org, Rainer Gerhards <rgerhards@HQ.ADISCON.COM>
Subject: Re: [Syslog] Syslog RFC feedback
X-BeenThere: syslog@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Issues in Network Event Logging <syslog.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/syslog>
List-Post: <mailto:syslog@ietf.org>
List-Help: <mailto:syslog-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Sender: syslog-bounces@ietf.org
Errors-To: syslog-bounces@ietf.org

Hi Raffy,

On Thu, 18 Dec 2008, Raffael Marty wrote:

> I am really late to the game here. I know. I just wanted to share some 
> feedback that I had about the current state of the syslog document:

You are late.  In fact, the document has been approved to become an RFC so 
no changes are allowed in that document.

I see that you note some areas of the specification that you disagree 
with.  This is expected as the IETF process (which is completed in this 
case) is a series of proposals, discussions, and compromises.  It is not 
expected that everyone will be entirely happy with the results, but 
overall we feel that we are pushing the technology forward and are 
producing a better product.  In fact, everyone can tell that we know that 
we havn't produced a perfect product since we have version numbers.  ;-)

Some comments inline.

>
> - Let me say this first: I really like some of the changes that have been 
> incorporated.

:-)

> - Syslog message facility: Why do we still keep this? The only reason that I 
> see people using the facility is to filter messages. There are better ways to 
> do that. Some of the pre-assigned groups are fairly arbitrary and not even 
> really implemented in most OSs. UUCP subsystem? Who is still using that? I 
> guess the reason for keeping it is backwards compatibility? If possible, I 
> would really like this to be gone.
> - Priority calculation. The whole priority field is funky. The priority does 
> not really have any meaning. The order does not imply importance. Why having 
> this at all?

The PRIs are being used today (although I agree that most labels are 
defunct) and the WG felt that having some backwards compatability would 
increase adoption of the spec.


> - Timestamps: What's the reason for having the "T" in the timestamp? Having 
> looked at hundreds of different log formats, I have never seen anything like 
> that. Why doing this?

http://www.ietf.org/rfc/rfc3339.txt?number=3339

> - Hostname: I am not comfortable with the whole hostname spec. I like that 
> there is an ordering and people are supposed to use FQDN, but there are many 
> questions about this. To start with, in a lot of UNIX configurations, 
> /etc/hosts contains an entry like:
> 127.0.0.1   localhost.localdomain  localhost
> The second column is the FQDN (technically). Is that one that can be used? 
> Can you make it clear that this is not what should be used? Same for 
> 127.0.0.1 or the loopback address in general. How does a machine know whether 
> an IP address is static or dynamic? How does a logging application know? I 
> don't think you will ever know that. Did you mean a private versus a public 
> address? That might be interesting. Furthermore, it should specify which 
> interface's IP address to use. The one the message is sent out on?

Domain names are defined in RFCs 1034 and 1035.  "localhost.localdomain" 
is not an FQDN.

> - Under the section of PROCID: The text is imprecise. This number is not the 
> process ID of the syslog process, it's the ID of the writing process. The 
> third paragraph talks about detecting restarted applications and somehow 
> mixes in the syslog process. ("might be assigned the same process ID as the 
> previous syslog process".) This is not clear at all and very very confusing
> - MSGID: Make clear that this ID is local to the application. It's not a 
> global ID at all.
>
> The biggest issue I have around the SD-ID field:
>
> - I like that the user can extend these.
> - Why is this structure so complicated? Why not going with a simple set of 
> key-value pairs? This whole structure thing is so complicated. Parsing it, 
> you need to keep state! You need to remember the SD-ID for each SD-PARAM. Why 
> introducing this? Just stick with simple key-value pairs. That makes parsing 
> easier. Much easier. And it makes the events easier to produce as well.
> - By keeping an explicit message field (the unstructured part), you encourage 
> people to still log in that way. I recommend using an explicit field (or 
> parameter) that can be used to include human readable text. Instead of this:
>
> <165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - - %% It's 
> time to make the do-nuts.
>
> use:
>
> <165>1 2003-08-24T05:14:15.000003-07:00 192.0.2.1 myproc 8710 - message="%% 
> It's time to make the do-nuts."
>
> or really:
>
> 1 2003-08-24 05:14:15.000003-07:00 host=192.0.2.1 process=myproc procid=8710 
> message="%% It's time to make the do-nuts."

Those could be considered globally unique attribute-value pairs as there 
would be no uncertainty about their context in those situations.  In 
specific contexts, we decided that people will reuse the attribute labels. 
As an (unlikely) example, let's use the attribute label of "color".  if it 
were globally unique, then it would have to be globally defined and 
accepted.  We get around that by specifying the context.  To use your 
way, we would have:
{syslog header stuff} color="yellow" I don't know what this really means
or, as we've defined it:
{syslog header stuff} [box_identification@9 color="teal"] Cuz it's cisco
We figured that the alternative would be to make each attribute label 
globally unique such as:
{syslog header stuff} ciscos_box_identification_color="teal"
which is not really workable.


>
> - I definitely like the consideration of some of the special fields 
> (structured data IDs). However, they should be used as simple keys (or 
> parameters) that have special meaning.
> - Parameter - origin: What does it mean to have multiple origins IPs? Is that 
> a syslog forwarding chain? The document does not say anything about that. 
> Also, we already have the host field in the beginning of the syslog messages. 
> What's the relationship to that? Or is origin something completely different?

We had several discussions about device virtualization.  Consider that a 
hosting machine will have its own IP address and hostname and that the 
virtual machines will have their own names and addresses.  The hosting 
device will now be able to send a message describing itself or one of its 
virtual machines.


> - Parameters - I would really like to see some use-cases for all of the IDs. 
> Especially the sequenceId. I am assuming this is something that the syslog 
> daemon assigns, not the logging application. Right? I think that needs to be 
> clearer. For the sequenceId, what happens for forwarded messages? Are these 
> IDs local? Are they forwarded along with a message?  Also, how does the 
> logging application know about the timeQuality? Or if that something that the 
> syslog daemon assigns, how does it know?

We've discussed writing a "use case" document.  It's not going to happen 
under our current charter but that's good input for rechartering.

(Note to group:  We won't discuss rechartering the WG until AFTER we get 
syslog-sign approved by our AD.)

> - I would really like to see the parameters to go away and have a generic 
> key-value extension. In addition, IANA should have a set of allowed/defined 
> keys. The parameters should be part of those. Each key has a special meaning 
> (semantics). There should be a whole lot of them: src_ip, user_name, etc. 
> Each producer should be free to add additional keys, realizing that not all 
> consumers would understand their semantics. However, the consumers could 
> still read them.

See above.  The IANA will update the parameters based upon RFCs.  I think 
that having those defined for specific uses is a really good idea and I 
think that discussion will be welcomed when we get around to talking about 
rechartering.

>
> That's it for now.
>
> Thanks a lot
>
> -raffy

Best regards,
Chris
_______________________________________________
Syslog mailing list
Syslog@ietf.org
https://www.ietf.org/mailman/listinfo/syslog


From kiwf@abbottexcellence.com  Fri Dec 19 11:44:58 2008
Return-Path: <kiwf@abbottexcellence.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 0DE743A681F
	for <ietfarch-syslog-archive@core3.amsl.com>; Fri, 19 Dec 2008 11:44:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -34.631
X-Spam-Level: 
X-Spam-Status: No, score=-34.631 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, DNS_FROM_OPENWHOIS=1.13, HTML_MESSAGE=0.001,
	MANGLED_OFF=2.3, MIME_HTML_ONLY=1.457, RCVD_IN_BL_SPAMCOP_NET=1.96,
	RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id qT4SnpGuhduw
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Fri, 19 Dec 2008 11:44:57 -0800 (PST)
Received: from 5acbc848.bb.sky.com (5acbc848.bb.sky.com [90.203.200.72])
	by core3.amsl.com (Postfix) with SMTP id 27E353A6A76
	for <syslog-archive@lists.ietf.org>; Fri, 19 Dec 2008 11:44:55 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Dear syslog-archive, Dec 81% 0FF
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081219194456.27E353A6A76@core3.amsl.com>
Date: Fri, 19 Dec 2008 11:44:55 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY>Dear Customer!<br>
Lovers package at discount price!<br>
Discount price store: ID 21411<br>
<a href="http://progressshall.com/">http://progressshall.com/</a><br><br>

Pfizer is a licensee of the TRUSTe Privacy Program.<br>
Â© 2001-2008 Pfizer Inc. All rights reserved.</BODY></HTML>


From jojoananan@allaboutwed.com  Sat Dec 20 07:20:02 2008
Return-Path: <jojoananan@allaboutwed.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id BD1233A67F5
	for <ietfarch-syslog-archive@core3.amsl.com>; Sat, 20 Dec 2008 07:20:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -13.424
X-Spam-Level: 
X-Spam-Status: No, score=-13.424 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, DNS_FROM_RFC_BOGUSMX=1.482, HELO_EQ_DE=0.35,
	HELO_EQ_DSL=1.129, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_PBL=0.905,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id zWe9LkkrsFKO
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sat, 20 Dec 2008 07:20:02 -0800 (PST)
Received: from advantageint.com (unknown [118.94.164.33])
	by core3.amsl.com (Postfix) with SMTP id 674DE3A67A1
	for <syslog-archive@ietf.org>; Sat, 20 Dec 2008 07:20:00 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: We have you been, honey?
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081220152001.674DE3A67A1@core3.amsl.com>
Date: Sat, 20 Dec 2008 07:20:00 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="http://readprogress.com/" target="_blank">
<img src="http://readprogress.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From newtonnn@alfadelta.com  Sat Dec 20 07:38:25 2008
Return-Path: <newtonnn@alfadelta.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 12ED43A67F5
	for <ietfarch-syslog-archive@core3.amsl.com>; Sat, 20 Dec 2008 07:38:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.816
X-Spam-Level: 
X-Spam-Status: No, score=-10.816 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_EQ_JP=1.244,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
	RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id bOwYWWOAbegB
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sat, 20 Dec 2008 07:38:24 -0800 (PST)
Received: from aig.co.jp (unknown [92.113.71.184])
	by core3.amsl.com (Postfix) with SMTP id 278C83A67A1
	for <syslog-archive@lists.ietf.org>; Sat, 20 Dec 2008 07:38:22 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Can't find you, darling
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081220153823.278C83A67A1@core3.amsl.com>
Date: Sat, 20 Dec 2008 07:38:22 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><a href="http://neighborability.com/" target="_blank">
<img src="http://neighborability.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From olinda@amuprogram.it  Sat Dec 20 16:28:27 2008
Return-Path: <olinda@amuprogram.it>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 3B7A83A688C
	for <ietfarch-syslog-archive@core3.amsl.com>; Sat, 20 Dec 2008 16:28:27 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -19.987
X-Spam-Level: 
X-Spam-Status: No, score=-19.987 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HELO_DYNAMIC_CHELLO_NL=3.595, HELO_EQ_NL=0.55,
	HOST_EQ_NL=1.545, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id aQbcrpUUy9cm
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sat, 20 Dec 2008 16:28:26 -0800 (PST)
Received: from i179088.upc-i.chello.nl (i179088.upc-i.chello.nl [62.195.179.88])
	by core3.amsl.com (Postfix) with SMTP id E8B343A696B
	for <syslog-archive@ietf.org>; Sat, 20 Dec 2008 16:28:24 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Have you changed your number?
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081221002824.E8B343A696B@core3.amsl.com>
Date: Sat, 20 Dec 2008 16:28:24 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><a href="http://factmother.com/" target="_blank">
<img src="http://factmother.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From jpinzon@abrahamlincoln.edu.co  Sat Dec 20 23:35:24 2008
Return-Path: <jpinzon@abrahamlincoln.edu.co>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 3BA763A690F
	for <ietfarch-syslog-archive@core3.amsl.com>; Sat, 20 Dec 2008 23:35:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -13.984
X-Spam-Level: 
X-Spam-Status: No, score=-13.984 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HELO_DYNAMIC_HCC=4.295, HELO_EQ_MODEMCABLE=0.768,
	HOST_EQ_MODEMCABLE=1.368, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id gEI6shadlAD6
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sat, 20 Dec 2008 23:35:23 -0800 (PST)
Received: from cpc2-birk5-0-0-cust924.bagu.cable.ntl.com (cpc2-birk5-0-0-cust924.bagu.cable.ntl.com [82.8.199.157])
	by core3.amsl.com (Postfix) with SMTP id 7FFB13A6857
	for <syslog-archive@lists.ietf.org>; Sat, 20 Dec 2008 23:35:20 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Affordable prescription products online
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081221073521.7FFB13A6857@core3.amsl.com>
Date: Sat, 20 Dec 2008 23:35:20 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://oxygenpicture.com/" target="_blank">
<img src="http://oxygenpicture.com/adv1.jpg" border=0 alt="We have made ordering affordable prescriptions easy! Check our online store!"></a></BODY></HTML>


From kulf@ahm.honda.com  Sun Dec 21 03:02:25 2008
Return-Path: <kulf@ahm.honda.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id D10893A6359
	for <ietfarch-syslog-archive@core3.amsl.com>; Sun, 21 Dec 2008 03:02:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -47.123
X-Spam-Level: 
X-Spam-Status: No, score=-47.123 tagged_above=-999 required=5
	tests=[BAYES_80=2, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id YWGEK7iIDx-8
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sun, 21 Dec 2008 03:02:25 -0800 (PST)
Received: from afterwork.com (unknown [85.98.178.123])
	by core3.amsl.com (Postfix) with SMTP id 0733C3A67CC
	for <syslog-archive@ietf.org>; Sun, 21 Dec 2008 03:02:23 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Cost effective and safe therapy of your diseases
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081221110224.0733C3A67CC@core3.amsl.com>
Date: Sun, 21 Dec 2008 03:02:23 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://handher.com/" target="_blank">
<img src="http://handher.com/1.gif" border=0 alt="Looking for a convenient but reliable access to all your prescriptions? The answer is here!"></a></BODY></HTML>


From n@alsopreview.com  Sun Dec 21 07:27:45 2008
Return-Path: <n@alsopreview.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id B0CF13A6A13
	for <ietfarch-syslog-archive@core3.amsl.com>; Sun, 21 Dec 2008 07:27:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -18.813
X-Spam-Level: 
X-Spam-Status: No, score=-18.813 tagged_above=-999 required=5
	tests=[BAYES_95=3, FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_DHCP=1.398,
	HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DSL=1.129,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id ZJeC3GiRVdnK
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sun, 21 Dec 2008 07:27:45 -0800 (PST)
Received: from adsl196-39-195-217-196.adsl196-15.iam.net.ma (adsl196-39-195-217-196.adsl196-15.iam.net.ma [196.217.195.39])
	by core3.amsl.com (Postfix) with SMTP id ABC2B3A6A10
	for <syslog-archive@ietf.org>; Sun, 21 Dec 2008 07:27:43 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Let's meet as usually
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081221152743.ABC2B3A6A10@core3.amsl.com>
Date: Sun, 21 Dec 2008 07:27:43 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://sightprogress.com/" target="_blank">
<img src="http://sightprogress.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From luciana.kuzolitz@alcoa.com.br  Sun Dec 21 07:37:45 2008
Return-Path: <luciana.kuzolitz@alcoa.com.br>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id F26F628C10F
	for <ietfarch-syslog-archive@core3.amsl.com>; Sun, 21 Dec 2008 07:37:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -19.288
X-Spam-Level: 
X-Spam-Status: No, score=-19.288 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
	RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id IATp4E0qnVLp
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sun, 21 Dec 2008 07:37:45 -0800 (PST)
Received: from advancedfinancialcompany.com (unknown [93.177.159.231])
	by core3.amsl.com (Postfix) with SMTP id 59C1A3A67B5
	for <syslog-archive@lists.ietf.org>; Sun, 21 Dec 2008 07:37:35 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Receive necessary treatment without problems
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081221153737.59C1A3A67B5@core3.amsl.com>
Date: Sun, 21 Dec 2008 07:37:35 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><a href="http://hugesix.com/" target="_blank">
<img src="http://hugesix.com/verty56.jpg" border=0 alt="Quick and safe way to order your prescriptions is here"></a></BODY></HTML>


From mcgee@alkhorayef.com  Sun Dec 21 10:45:09 2008
Return-Path: <mcgee@alkhorayef.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 56D183A6983
	for <ietfarch-syslog-archive@core3.amsl.com>; Sun, 21 Dec 2008 10:45:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.35
X-Spam-Level: 
X-Spam-Status: No, score=-6.35 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HOST_EQ_D_D_D_D=0.765,
	FH_HOST_EQ_D_D_D_DB=0.888, HELO_MISMATCH_NET=0.611,
	HOST_EQ_CHARTER=1.295, HOST_EQ_STATIC=1.172, HOST_MISMATCH_COM=0.311,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	TVD_SPACE_RATIO=2.219, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_SC_SURBL=10, URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 524xPh89T3Ud
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sun, 21 Dec 2008 10:45:08 -0800 (PST)
Received: from activemember.net (75-142-100-134.static.mtpk.ca.charter.com [75.142.100.134])
	by core3.amsl.com (Postfix) with SMTP id CCD3B3A679C
	for <syslog-archive@ietf.org>; Sun, 21 Dec 2008 10:45:05 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Don't disappear again!
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081221184507.CCD3B3A679C@core3.amsl.com>
Date: Sun, 21 Dec 2008 10:45:05 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://earlytradition.com/" target="_blank">
<img src="http://earlytradition.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From syslog-bounces@ietf.org  Mon Dec 22 09:55:05 2008
Return-Path: <syslog-bounces@ietf.org>
X-Original-To: syslog-archive@megatron.ietf.org
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from [127.0.0.1] (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 4ED6C28C123;
	Mon, 22 Dec 2008 09:55:05 -0800 (PST)
X-Original-To: syslog@core3.amsl.com
Delivered-To: syslog@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 53D683A6A8B
	for <syslog@core3.amsl.com>; Mon, 22 Dec 2008 09:55:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5
	tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 2VqmxH+cpXYm for <syslog@core3.amsl.com>;
	Mon, 22 Dec 2008 09:55:03 -0800 (PST)
Received: from yx-out-2324.google.com (yx-out-2324.google.com [74.125.44.28])
	by core3.amsl.com (Postfix) with ESMTP id 4B07728C123
	for <syslog@ietf.org>; Mon, 22 Dec 2008 09:55:03 -0800 (PST)
Received: by yx-out-2324.google.com with SMTP id 8so1174737yxg.49
	for <syslog@ietf.org>; Mon, 22 Dec 2008 09:54:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:date:from:to
	:subject:cc:in-reply-to:mime-version:content-type
	:content-transfer-encoding:content-disposition:references;
	bh=WX9brtX5gL1ngEvhS/8uNWv+wE3qOjJRGfveE72cp0o=;
	b=dihgHK36xYKxS62JI/KgGP3TDhFCuAGXklyiNW6RRgY1EmTb4TksRMFChWMZ+lK8t8
	QvnNttH/6yb1xqpnGRNjEL3syRcSTW6MXpRx5KLAW+w/A3YFuWL+4k+gLglzFpAWGhMw
	GBBahvXjn5rCmkWwGnk7wkL1clSEWXGtPTV+Y=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:to:subject:cc:in-reply-to:mime-version
	:content-type:content-transfer-encoding:content-disposition
	:references;
	b=KrGZ94J8ZRZYCLKrtVtM16sGVNvLrCgUJh8zgPVkrfKWAUlXIlD0fpg+PEMpUEcw7p
	grR5fzMw6Wps6v/4XSs1s9sGTeXtmefTa+2w3qU50p6bkt9TCiBoAvSZKrCO70/nIJin
	Xk3fFP31xBSR/PbNgWyzGgWe3UQb1YDG8fToA=
Received: by 10.90.104.20 with SMTP id b20mr3359826agc.109.1229968494640;
	Mon, 22 Dec 2008 09:54:54 -0800 (PST)
Received: by 10.90.81.16 with HTTP; Mon, 22 Dec 2008 09:54:54 -0800 (PST)
Message-ID: <45c8c21a0812220954l85e200fs1bdbadb116eab57c@mail.gmail.com>
Date: Mon, 22 Dec 2008 12:54:54 -0500
From: "Richard Graveman" <rfgraveman@gmail.com>
To: "Chris Lonvick" <clonvick@cisco.com>
In-Reply-To: <Pine.GSO.4.63.0812181245520.16976@sjc-cde-011.cisco.com>
MIME-Version: 1.0
Content-Disposition: inline
References: <Pine.GSO.4.63.0812181245520.16976@sjc-cde-011.cisco.com>
Cc: syslog@ietf.org
Subject: Re: [Syslog] Reviews of syslog-sign before the Holidays
X-BeenThere: syslog@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Security Issues in Network Event Logging <syslog.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/syslog>
List-Post: <mailto:syslog@ietf.org>
List-Help: <mailto:syslog-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/syslog>,
	<mailto:syslog-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: syslog-bounces@ietf.org
Errors-To: syslog-bounces@ietf.org

Hi Chris,

I think this document is in excellent shape and encourage the WG to
move it out as quickly as possible.

Nits, all minor:

1. In 4.2.2, line 3 and 4.24, line 5:

Leading zeroes MUST be omitted.

-> except for a value of 0, which is encoded as "0"


2. In 4.2.4, line 8:

other than 0

-> other then 0 or 9999999999 (the latter case is covered above)

3. In 4.2.9, line 2, and in 5.3.2.9, line 2:

Tell the RFC Editor to change this to "RFC publication rules"


4. In 5.3.2.4 and 5.2.3.6:

Are leading ASCII zeros prohibited in these two cases also, or are
these two different?

5. In 7.1, case (b):

-> This should never happen, but I suppose there are pathological
cases, e.g., mis-configurations, where more than one different but
valid payload could be reconstructed. The software should at least
deal with this, and perhaps either (1) use other knowledge to choose
which to keep; or (2) retain all of them for later use.

6. Section 8.11:

IP is so full of covert channels, that it suffices to say that this
protocol doesn't really change that fact. The example is a very narrow
pipe; much wider ones exist.

7. References, [RFC5226]

Comma missing after T.

8. In general, I'm not sure why three or more author references are written:

"Jones, A., Smith, B., and C. Brown" rather than "Jones, A., B. Smith,
and C. Brown"

Regards, Rich Graveman
_______________________________________________
Syslog mailing list
Syslog@ietf.org
https://www.ietf.org/mailman/listinfo/syslog


From nenus101@altwaren-handel.at  Mon Dec 22 11:24:00 2008
Return-Path: <nenus101@altwaren-handel.at>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 2427128C0DD
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon, 22 Dec 2008 11:24:00 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 4.332
X-Spam-Level: ****
X-Spam-Status: No, score=4.332 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, DNS_FROM_OPENWHOIS=1.13,
	FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765,
	FH_HOST_EQ_D_D_D_DB=0.888, FM_DDDD_TIMES_2=1.999,
	HELO_DYNAMIC_HCC=4.295, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_DSL=1.129,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619,
	RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id ju7udhCnSyb3
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon, 22 Dec 2008 11:24:00 -0800 (PST)
Received: from 81-86-32-199.dsl.pipex.com (81-86-32-199.dsl.pipex.com [81.86.32.199])
	by core3.amsl.com (Postfix) with SMTP id A8A6828C0D0
	for <syslog-archive@lists.ietf.org>; Mon, 22 Dec 2008 11:23:58 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: I don't know where are you!
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081222192358.A8A6828C0D0@core3.amsl.com>
Date: Mon, 22 Dec 2008 11:23:58 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://readylegacy.com/" target="_blank">
<img src="http://readylegacy.com/newyear2.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From nietomauricio.nieto@aeromar.com.mx  Mon Dec 22 13:28:53 2008
Return-Path: <nietomauricio.nieto@aeromar.com.mx>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id A45E13A68D5
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon, 22 Dec 2008 13:28:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.087
X-Spam-Level: 
X-Spam-Status: No, score=-3.087 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, DNS_FROM_RFC_BOGUSMX=1.482,
	FH_HELO_EQ_D_D_D_D=1.597, FH_HOST_EQ_D_D_D_D=0.765,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_HCC=4.295,
	HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_DIALUP=0.862, HELO_EQ_DSL=1.129,
	HOST_EQ_DIALUP=0.862, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_PBL=0.905,
	RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id uya-ShhWx5sQ
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon, 22 Dec 2008 13:28:53 -0800 (PST)
Received: from r190-135-155-42.dialup.adsl.anteldata.net.uy (r190-135-155-42.dialup.adsl.anteldata.net.uy [190.135.155.42])
	by core3.amsl.com (Postfix) with SMTP id 133E13A67A7
	for <syslog-archive@lists.ietf.org>; Mon, 22 Dec 2008 13:28:49 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Where are you, man?
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081222212850.133E13A67A7@core3.amsl.com>
Date: Mon, 22 Dec 2008 13:28:49 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://fruitcrease.com/" target="_blank">
<img src="http://fruitcrease.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From mylesjodi.pearson@abrimobile.com  Mon Dec 22 22:32:04 2008
Return-Path: <mylesjodi.pearson@abrimobile.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 3757D3A6AA1
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon, 22 Dec 2008 22:32:04 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -49.683
X-Spam-Level: 
X-Spam-Status: No, score=-49.683 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_EQ_PL=1.135,
	HELO_MISMATCH_PL=1.448, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 6u9htAJRXnuI
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon, 22 Dec 2008 22:32:03 -0800 (PST)
Received: from advantech.pl (unknown [122.164.225.104])
	by core3.amsl.com (Postfix) with SMTP id 0C2D83A698D
	for <syslog-archive@lists.ietf.org>; Mon, 22 Dec 2008 22:32:01 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Lost my number? )
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081223063202.0C2D83A698D@core3.amsl.com>
Date: Mon, 22 Dec 2008 22:32:01 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://symbolson.com/" target="_blank">
<img src="http://symbolson.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From oom32red@32red.com  Tue Dec 23 05:27:47 2008
Return-Path: <oom32red@32red.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 4F6CF3A68CB
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue, 23 Dec 2008 05:27:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -33.052
X-Spam-Level: 
X-Spam-Status: No, score=-33.052 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_EQ_AU=0.377,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619,
	RCVD_IN_XBL=3.033, RDNS_NONE=0.1, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_SBL=20, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id kmNLJZyA0yRh
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue, 23 Dec 2008 05:27:46 -0800 (PST)
Received: from alcoa.com.au (unknown [87.121.13.199])
	by core3.amsl.com (Postfix) with SMTP id 928AA3A680F
	for <syslog-archive@lists.ietf.org>; Tue, 23 Dec 2008 05:27:44 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: All your buddies will envy you
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081223132745.928AA3A680F@core3.amsl.com>
Date: Tue, 23 Dec 2008 05:27:44 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://pintmass.com/" target="_blank">
<img src="http://images.pintmass.com/peb.jpg" border=0 alt="Go ahead, love and passion are waiting for you!"></a></BODY></HTML>


From obeng@adac-eng.co.jp  Tue Dec 23 11:27:45 2008
Return-Path: <obeng@adac-eng.co.jp>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 387DB3A6B35
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue, 23 Dec 2008 11:27:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.674
X-Spam-Level: 
X-Spam-Status: No, score=-2.674 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_VERIZON_P=2.144,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR=2.426,
	HELO_EQ_VERIZON_POOL=1.495, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	SARE_SPEC_REALLY_WORK2=0.617, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SBL=20,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id OenYsDBqn6Yf
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue, 23 Dec 2008 11:27:44 -0800 (PST)
Received: from pool-70-18-78-40.scr.east.verizon.net (pool-70-18-78-40.scr.east.verizon.net [70.18.78.40])
	by core3.amsl.com (Postfix) with SMTP id B533B3A67D0
	for <syslog-archive@lists.ietf.org>; Tue, 23 Dec 2008 11:27:42 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: A method that works wonders
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081223192743.B533B3A67D0@core3.amsl.com>
Date: Tue, 23 Dec 2008 11:27:42 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><a href="http://liketills.com/" target="_blank">
<img src="http://images.liketills.com/peb2.jpg" border=0 alt="Help your little soldier to reach greater length fast!"></a></BODY></HTML>


From mcressx@adt.com  Wed Dec 24 16:35:09 2008
Return-Path: <mcressx@adt.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 14F273A697E
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 24 Dec 2008 16:35:09 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -31.713
X-Spam-Level: 
X-Spam-Status: No, score=-31.713 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id hK0RvL2l4XZu
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 24 Dec 2008 16:35:08 -0800 (PST)
Received: from 4sportscards.com (unknown [88.246.32.154])
	by core3.amsl.com (Postfix) with SMTP id 94F773A695C
	for <syslog-archive@lists.ietf.org>; Wed, 24 Dec 2008 16:35:06 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Be a god of her intimate dreams
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081225003506.94F773A695C@core3.amsl.com>
Date: Wed, 24 Dec 2008 16:35:06 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="http://conefrom.com/" target="_blank">
<img src="http://images.conemain.com/vl4.jpg" border=0 alt="You WILL have bigger love wand, forget all your doubts!"></a></BODY></HTML>


From lweisner@abs-kc.com  Wed Dec 24 18:56:53 2008
Return-Path: <lweisner@abs-kc.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 604EA3A694E
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 24 Dec 2008 18:56:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -25.599
X-Spam-Level: 
X-Spam-Status: No, score=-25.599 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id WjXZlIVIVduZ
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 24 Dec 2008 18:56:52 -0800 (PST)
Received: from cust-177-192.on5.ontelecoms.gr (cust-177-192.on5.ontelecoms.gr [92.119.177.192])
	by core3.amsl.com (Postfix) with SMTP id 4EA523A679C
	for <syslog-archive@ietf.org>; Wed, 24 Dec 2008 18:56:50 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Improbable things can really happen!
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081225025651.4EA523A679C@core3.amsl.com>
Date: Wed, 24 Dec 2008 18:56:50 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://conesame.com/" target="_blank">
<img src="http://images.conemain.com/vl4.jpg" border=0 alt="Many people have already benefited from our method! You're the next!"></a></BODY></HTML>


From navarror@agri-fab.com  Thu Dec 25 01:44:51 2008
Return-Path: <navarror@agri-fab.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id E91293A63D2
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 25 Dec 2008 01:44:51 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -22.59
X-Spam-Level: 
X-Spam-Status: No, score=-22.59 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id qfoDgBD-yqEw
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 25 Dec 2008 01:44:51 -0800 (PST)
Received: from adsl-068-213-228-114.sip.mia.bellsouth.net (adsl-068-213-228-114.sip.mia.bellsouth.net [68.213.228.114])
	by core3.amsl.com (Postfix) with SMTP id D8C073A6358
	for <syslog-archive@ietf.org>; Thu, 25 Dec 2008 01:44:48 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Undeliverable Mail
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081225094448.D8C073A6358@core3.amsl.com>
Date: Thu, 25 Dec 2008 01:44:48 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://resultanimal.com/" target="_blank">
<img src="http://resultanimal.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From nette.gron@a-lehdet.fi  Thu Dec 25 04:58:07 2008
Return-Path: <nette.gron@a-lehdet.fi>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id C6ABA3A68A7
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 25 Dec 2008 04:58:07 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -35.533
X-Spam-Level: 
X-Spam-Status: No, score=-35.533 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HELO_DYNAMIC_DIALIN=3.384,
	HELO_EQ_DIP_DIALIN=1.573, HOST_EQ_DIP_TDIAL=2.144,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_RHS_DOB=1.083,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id gZ8rJowXb4By
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 25 Dec 2008 04:58:07 -0800 (PST)
Received: from p549B4AC5.dip.t-dialin.net (p549B4AC5.dip.t-dialin.net [84.155.74.197])
	by core3.amsl.com (Postfix) with SMTP id 073B33A6774
	for <syslog-archive@ietf.org>; Thu, 25 Dec 2008 04:58:05 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Lost my number? )
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081225125806.073B33A6774@core3.amsl.com>
Date: Thu, 25 Dec 2008 04:58:05 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://differdefinition.com/" target="_blank">
<img src="http://differdefinition.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From kwalker@alliance.com.au  Thu Dec 25 13:29:53 2008
Return-Path: <kwalker@alliance.com.au>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 2E0A23A69A4
	for <ietfarch-syslog-archive@core3.amsl.com>; Thu, 25 Dec 2008 13:29:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -12.116
X-Spam-Level: 
X-Spam-Status: No, score=-12.116 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_NL=0.55,
	HOST_EQ_NL=1.545, HTML_IMAGE_ONLY_12=2.46, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_2=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_SORBS_WEB=0.619,
	RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1, TVD_RCVD_IP=1.931,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id h3Mmj6cPe4rY
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Thu, 25 Dec 2008 13:29:52 -0800 (PST)
Received: from 82-169-115-110.ip.telfort.nl (82-169-115-110.ip.telfort.nl [82.169.115.110])
	by core3.amsl.com (Postfix) with SMTP id 9745A3A6989
	for <syslog-archive@lists.ietf.org>; Thu, 25 Dec 2008 13:29:47 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Be healthier and live longer!
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081225212950.9745A3A6989@core3.amsl.com>
Date: Thu, 25 Dec 2008 13:29:47 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><p align="center"><font SIZE="1" COLOR="#000000" FACE="tahoma">
<span style="background-color:#bdf2c9;">If you are unable to see the message below, <A href="http://achievementmeet.com/">click here to view</A>.</span><br>
</font>
<center>
<a href="http://responsibilityguess.com/"><img border="0" alt="Visit our store today, when the prices for most popular preparations are reduced!" src="http://responsibilityguess.com/yter5.jpg"></a></p>
</center>
 <hr width="20%" noshade>
      <p align="center">
       <font color="#999999" size="-1" face="Arial, Helvetica, sans-serif">PLEASE DO NOT REPLY - This is being sent
		from an unattended mailbox. <br>
     <p align="center">Copyright Â© 2008 MaxGentleman, Inc. All rights reserved.<br>
        5 Trowbridge Drive, Bethel, CT 319098</p>
<p align="center">You have received this message because you<br>
opted in to receives MaxGentleman pecial offers via email.</p>
<p align="center">You can unsubscribe <a href="http://responsibilityguess.com/">here</a></p></font></BODY></HTML>


From lydiam@alternatives.co.uk  Fri Dec 26 14:54:45 2008
Return-Path: <lydiam@alternatives.co.uk>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 5D6943A684C
	for <ietfarch-syslog-archive@core3.amsl.com>; Fri, 26 Dec 2008 14:54:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -31.713
X-Spam-Level: 
X-Spam-Status: No, score=-31.713 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SC_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 7wGQtwNfLUZq
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Fri, 26 Dec 2008 14:54:44 -0800 (PST)
Received: from aeronimbus.com (unknown [85.106.254.154])
	by core3.amsl.com (Postfix) with SMTP id 925083A63D3
	for <syslog-archive@lists.ietf.org>; Fri, 26 Dec 2008 14:54:42 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Your girlfriend seeks for you
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081226225443.925083A63D3@core3.amsl.com>
Date: Fri, 26 Dec 2008 14:54:42 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://spiritualitystead.com/" target="_blank">
<img src="http://spiritualitystead.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From kathlene@alumni.washington.edu  Sat Dec 27 03:38:45 2008
Return-Path: <kathlene@alumni.washington.edu>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id E1C693A690F
	for <ietfarch-syslog-archive@core3.amsl.com>; Sat, 27 Dec 2008 03:38:45 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -35.173
X-Spam-Level: 
X-Spam-Status: No, score=-35.173 tagged_above=-999 required=5
	tests=[BAYES_50=0.001, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888,
	FM_DDDD_TIMES_2=1.999, HELO_DYNAMIC_IPADDR2=4.395, HELO_EQ_BR=0.955,
	HOST_EQ_BR=1.295, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, TVD_RCVD_IP=1.931,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id NJQPTXEFhuwA
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sat, 27 Dec 2008 03:38:45 -0800 (PST)
Received: from cpe87.neoplus.adsl.tpnet.pl (cpe87.neoplus.adsl.tpnet.pl [83.31.210.87])
	by core3.amsl.com (Postfix) with SMTP id 9C0073A66B4
	for <syslog-archive@ietf.org>; Sat, 27 Dec 2008 03:38:43 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: We need your presence
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081227113844.9C0073A66B4@core3.amsl.com>
Date: Sat, 27 Dec 2008 03:38:43 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><a href="http://multiplygenerosity.com/" target="_blank">
<img src="http://multiplygenerosity.com/adv4.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From laura.guidi1@alice.it  Sat Dec 27 04:40:25 2008
Return-Path: <laura.guidi1@alice.it>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id AC50E3A67E1
	for <ietfarch-syslog-archive@core3.amsl.com>; Sat, 27 Dec 2008 04:40:25 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -45.194
X-Spam-Level: 
X-Spam-Status: No, score=-45.194 tagged_above=-999 required=5
	tests=[BAYES_95=3, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 3bFEYEWB53BD
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sat, 27 Dec 2008 04:40:24 -0800 (PST)
Received: from 5ad83b49.bb.sky.com (5ad83b49.bb.sky.com [90.216.59.73])
	by core3.amsl.com (Postfix) with SMTP id 2132C3A67A5
	for <syslog-archive@lists.ietf.org>; Sat, 27 Dec 2008 04:40:22 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Returned mail: Over quota
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081227124023.2132C3A67A5@core3.amsl.com>
Date: Sat, 27 Dec 2008 04:40:22 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
</HEAD>
<BODY><a href="http://hardwisdom.com/" target="_blank">
<img src="http://hardwisdom.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From kxgfiaejxnkn@212.com  Sat Dec 27 07:11:58 2008
Return-Path: <kxgfiaejxnkn@212.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id EE10A3A690E
	for <ietfarch-syslog-archive@core3.amsl.com>; Sat, 27 Dec 2008 07:11:58 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.887
X-Spam-Level: 
X-Spam-Status: No, score=-17.887 tagged_above=-999 required=5
	tests=[BAYES_50=0.001, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999,
	HELO_DYNAMIC_DHCP=1.398, HELO_DYNAMIC_IPADDR=2.426,
	HELO_EQ_DYNAMIC=1.144, HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id X2Z52mW4-U1w
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sat, 27 Dec 2008 07:11:58 -0800 (PST)
Received: from dynamic-acs-24-154-218-63.zoominternet.net (dynamic-acs-24-154-218-63.zoominternet.net [24.154.218.63])
	by core3.amsl.com (Postfix) with SMTP id 071073A6957
	for <syslog-archive@ietf.org>; Sat, 27 Dec 2008 07:11:57 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Mail delivery failed: returning message to sender
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081227151158.071073A6957@core3.amsl.com>
Date: Sat, 27 Dec 2008 07:11:57 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><a href="http://hisorder.com/" target="_blank">
<img src="http://hisorder.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From mark.lambert@advantechamt.com  Sun Dec 28 02:28:34 2008
Return-Path: <mark.lambert@advantechamt.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 52D2B28C1C6
	for <ietfarch-syslog-archive@core3.amsl.com>; Sun, 28 Dec 2008 02:28:34 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -20.719
X-Spam-Level: 
X-Spam-Status: No, score=-20.719 tagged_above=-999 required=5
	tests=[BAYES_80=2, HELO_EQ_JP=1.244, HELO_EQ_NE_JP=1.244,
	HOST_EQ_JP=1.265, HOST_EQ_NE_JP=2.599, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033, SARE_HTML_A_BODY=0.742,
	SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id vgbVEiiLSWkh
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sun, 28 Dec 2008 02:28:33 -0800 (PST)
Received: from p3126-ipbf201hiraide.tochigi.ocn.ne.jp (p3126-ipbf201hiraide.tochigi.ocn.ne.jp [124.84.92.126])
	by core3.amsl.com (Postfix) with SMTP id A816128C1C2
	for <syslog-archive@ietf.org>; Sun, 28 Dec 2008 02:28:32 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Returned mail: see transcript for details
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081228102832.A816128C1C2@core3.amsl.com>
Date: Sun, 28 Dec 2008 02:28:32 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1250">
</HEAD>
<BODY><a href="http://reciprocitypast.com/" target="_blank">
<img src="http://reciprocitypast.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From mallorca.rcvh@aegon.es  Sun Dec 28 07:16:01 2008
Return-Path: <mallorca.rcvh@aegon.es>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 68FFB3A6B22
	for <ietfarch-syslog-archive@core3.amsl.com>; Sun, 28 Dec 2008 07:16:01 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -22.668
X-Spam-Level: 
X-Spam-Status: No, score=-22.668 tagged_above=-999 required=5
	tests=[BAYES_60=1, HELO_EQ_BR=0.955, HOST_EQ_BR=1.295,
	HTML_IMAGE_ONLY_04=2.041, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666,
	SARE_RECV_VIRTUACOMBR=1.193, URIBL_AB_SURBL=10, URIBL_BLACK=20,
	URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_RHS_DOB=1.083,
	URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 8JUyi6Un48ik
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Sun, 28 Dec 2008 07:16:00 -0800 (PST)
Received: from c951647b.virtua.com.br (c951647b.virtua.com.br [201.81.100.123])
	by core3.amsl.com (Postfix) with SMTP id A75703A6B1C
	for <syslog-archive@ietf.org>; Sun, 28 Dec 2008 07:15:58 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Returned mail: User unknown
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081228151559.A75703A6B1C@core3.amsl.com>
Date: Sun, 28 Dec 2008 07:15:58 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><a href="http://reciprocitypast.com/" target="_blank">
<img src="http://reciprocitypast.com/8dvs9.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From kaizaki_yk@ab-advance.co.jp  Mon Dec 29 13:08:13 2008
Return-Path: <kaizaki_yk@ab-advance.co.jp>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id E20BC3A6C68
	for <ietfarch-syslog-archive@core3.amsl.com>; Mon, 29 Dec 2008 13:08:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -8.7
X-Spam-Level: 
X-Spam-Status: No, score=-8.7 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HTML_IMAGE_ONLY_16=1.526, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_2=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SBL=20,
	URIBL_SC_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id hjCUApVoFZDr
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Mon, 29 Dec 2008 13:08:13 -0800 (PST)
Received: from 5ac38618.bb.sky.com (5ac38618.bb.sky.com [90.195.134.24])
	by core3.amsl.com (Postfix) with SMTP id 1C1FB3A6C69
	for <syslog-archive@ietf.org>; Mon, 29 Dec 2008 13:08:11 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: More meat is never excessive
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081229210812.1C1FB3A6C69@core3.amsl.com>
Date: Mon, 29 Dec 2008 13:08:11 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><b><p align="center"><a href="http://jelldale.com/">
<img border="0" src="http://images.jelldale.com/new.jpg"></a></p>
<div align="center">
  <table border="0" width="500" cellspacing="0" cellpadding="0" bgcolor="#ffffff" style="font-family: Tahoma; font-size: 10pt">
    <tr>
      <td>
      <blockquote><p><br>
        Please do not reply to this email. To contact Armstrong Shank Advertising, please
        visit <a href="http://jelldale.com/">us</a></p>
        <hr><p><font size="1">This email message was sent to <syslog-archive@ietf.org>. If
        you do not wish to receive further communications from Armstrong Shank Advertising,
        click <a href="http://hourdrew.com/">
        here</a> to unsubscribe.
        </font></p><p><font size="1">If you've experience any difficulty
        in being removed from a Armstrong Shank Advertising email list, click <a href="http://jelldale.com/">
        here</a> for personalized help.</font></p><hr>
        <p><font size="1">Copyright Â© 2008 Armstrong Shank Advertising, Inc. All rights reserved.<br>
        7450 S Seneca, Haysville, KS 67060</font></p></blockquote>
</td></tr></table></div></BODY></HTML>


From maurice.ducoing@algomod.com  Tue Dec 30 02:36:47 2008
Return-Path: <maurice.ducoing@algomod.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 7F96B3A67AB
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue, 30 Dec 2008 02:36:47 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -26.749
X-Spam-Level: 
X-Spam-Status: No, score=-26.749 tagged_above=-999 required=5
	tests=[BAYES_80=2, HELO_EQ_FR=0.35, HTML_IMAGE_ONLY_04=2.041,
	HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033,
	SARE_HTML_A_BODY=0.742, SARE_HTML_IMG_ONLY=1.666, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10,
	URIBL_WS_SURBL=10, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id QAG5XpQRtf0f
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue, 30 Dec 2008 02:36:46 -0800 (PST)
Received: from home.herewithme.fr (home.herewithme.fr [88.176.123.231])
	by core3.amsl.com (Postfix) with SMTP id C4B703A67D4
	for <syslog-archive@ietf.org>; Tue, 30 Dec 2008 02:36:44 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: I'm in trouble, where are you?
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081230103645.C4B703A67D4@core3.amsl.com>
Date: Tue, 30 Dec 2008 02:36:44 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=Windows-1252">
</HEAD>
<BODY><a href="http://floorresult.com/" target="_blank">
<img src="http://floorresult.com/adv3.jpg" border=0 alt="Having trouble viewing this email?
Click here to view as a webpage."></a></BODY></HTML>


From melanieburger@alo4all.com  Tue Dec 30 03:42:02 2008
Return-Path: <melanieburger@alo4all.com>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id C45053A6837
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue, 30 Dec 2008 03:42:02 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.289
X-Spam-Level: 
X-Spam-Status: No, score=-14.289 tagged_above=-999 required=5
	tests=[BAYES_95=3, FH_RELAY_NODNS=1.451, GB_I_LETTER=-2,
	HTML_EXTRA_CLOSE=2.809, HTML_IMAGE_ONLY_16=1.526, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_2=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_NONE=0.1,
	SARE_UNI=0.591, URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10,
	URIBL_OB_SURBL=10, URIBL_SC_SURBL=10, URIBL_WS_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id o-LHBdFIKsTY
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue, 30 Dec 2008 03:42:02 -0800 (PST)
Received: from altoona.k12.wi.us (unknown [201.29.222.78])
	by core3.amsl.com (Postfix) with SMTP id 470193A63EC
	for <syslog-archive@ietf.org>; Tue, 30 Dec 2008 03:41:58 -0800 (PST)
To: <syslog-archive@ietf.org>
Subject: Returned mail: Over quota
From: <syslog-archive@ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081230114159.470193A63EC@core3.amsl.com>
Date: Tue, 30 Dec 2008 03:41:58 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><tr><td>
<div align=center> <a href="http://samekept.com/" target="_blank">
<img src="http://samekept.com/adv1.jpg" border=0 alt="Click Here!"></a></div>
</td></tr><tr><td class=EC_legal><strong>About this mailing: </strong><br>
You are receiving this e-mail because you subscribed to MSN Featured Offers. 
Microsoft respects your privacy. If you do not wish to receive this MSN Featured 
Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe 
you from e-mail communications from third-party advertisers that may appear in MSN 
Feature Offers. This shall not constitute an offer by MSN. MSN shall not be 
responsible or liable for the advertisers' content nor any of the goods or service
 advertised. Prices and item availability subject to change without notice.<br><br>
C2008 Microsoft | <a href="http://samekept.com/" target="_blank">Unsubscribe</a> | 
<a href="http://samekept.com/" target="_blank">More Newsletters</a> | 
<a href="http://samekept.com/" target="_blank">Privacy</a><br><br>
          Microsoft Corporation, One Microsoft Way, Redmond, WA 98052
</td></tr></table></td></tr></table></div></div></div></BODY></HTML>


From msfh-coxsbazar-homdd@amsterdam.msf.org  Tue Dec 30 07:32:21 2008
Return-Path: <msfh-coxsbazar-homdd@amsterdam.msf.org>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 082BC3A68F0
	for <ietfarch-syslog-archive@core3.amsl.com>; Tue, 30 Dec 2008 07:32:21 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -17.124
X-Spam-Level: 
X-Spam-Status: No, score=-17.124 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HELO_DYNAMIC_DHCP=1.398,
	HTML_IMAGE_ONLY_16=1.526, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_2=0.001, MIME_HTML_ONLY=1.457,
	RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_XBL=3.033, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SBL=20, URIBL_SC_SURBL=10,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id NeZ2UrAo7bw3
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Tue, 30 Dec 2008 07:32:20 -0800 (PST)
Received: from cable-static-238-217.teleport.ch (cable-static-238-217.teleport.ch [213.188.238.217])
	by core3.amsl.com (Postfix) with SMTP id 536073A67E1
	for <syslog-archive@lists.ietf.org>; Tue, 30 Dec 2008 07:32:18 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Beef your package up with more inches
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081230153219.536073A67E1@core3.amsl.com>
Date: Tue, 30 Dec 2008 07:32:18 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><b><p align="center"><a href="http://kaidlong.com/">
<img border="0" src="http://images.kaidgulf.com/new.jpg"></a></p>
<div align="center">
  <table border="0" width="500" cellspacing="0" cellpadding="0" bgcolor="#ffffff" style="font-family: Tahoma; font-size: 10pt">
    <tr>
      <td>
      <blockquote><p><br>
        Please do not reply to this email. To contact Armstrong Shank Advertising, please
        visit <a href="http://kaidlush.com/">us</a></p>
        <hr><p><font size="1">This email message was sent to <syslog-archive@lists.ietf.org>. If
        you do not wish to receive further communications from Armstrong Shank Advertising,
        click <a href="http://kingchic.com/">
        here</a> to unsubscribe.
        </font></p><p><font size="1">If you've experience any difficulty
        in being removed from a Armstrong Shank Advertising email list, click <a href="http://longchic.com/">
        here</a> for personalized help.</font></p><hr>
        <p><font size="1">Copyright Â© 2008 Armstrong Shank Advertising, Inc. All rights reserved.<br>
        7450 S Seneca, Haysville, KS 67060</font></p></blockquote>
</td></tr></table></div></BODY></HTML>


From nickolas@ambiance-classique.ch  Wed Dec 31 04:21:36 2008
Return-Path: <nickolas@ambiance-classique.ch>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 0C8A63A67F3
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 31 Dec 2008 04:21:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -14.016
X-Spam-Level: 
X-Spam-Status: No, score=-14.016 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, FH_HELO_EQ_D_D_D_D=1.597,
	FH_HOST_EQ_D_D_D_D=0.765, FM_DDDD_TIMES_2=1.999,
	HELO_DYNAMIC_IPADDR=2.426, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327,
	HTML_IMAGE_ONLY_08=1.787, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_1=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_PBL=0.905,
	RDNS_DYNAMIC=0.1, SARE_HTML_A_BODY=0.742, URIBL_AB_SURBL=10,
	URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_OB_SURBL=10, URIBL_SBL=20,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id PqmleGc7Kd8R
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 31 Dec 2008 04:21:35 -0800 (PST)
Received: from C-59-101-77-223.syd.connect.net.au (C-61-69-179-35.syd.connect.net.au [61.69.179.35])
	by core3.amsl.com (Postfix) with SMTP id A6A193A67B2
	for <syslog-archive@lists.ietf.org>; Wed, 31 Dec 2008 04:21:29 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: Happy New Year To U!
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20081231122130.A6A193A67B2@core3.amsl.com>
Date: Wed, 31 Dec 2008 04:21:29 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-2">
</HEAD>
<BODY><br><a href="http://paidmine.com/">
<img border="0" src="http://images.peonsend.com/new.jpg"></a></p>
  <table border="0" width="500" cellspacing="0" cellpadding="0" bgcolor="#ffffff" style="font-family: arial; font-size: 10pt">
    <tr>
      <td>
      <br>
        Please do not reply to this email. <br>To contact MAX Company, please
        visit <a href="http://peonrush.com/">our web page</a></p>
        <p><font size="1">Copyright Â© 2008 MAX Company, Inc. All rights reserved.<br>
        15941 Atlanta, Route des Acacias, AT 62532</font>
</td></tr></table></BODY></HTML>


From jwagonerp@577foundation.org  Wed Dec 31 19:48:13 2008
Return-Path: <jwagonerp@577foundation.org>
X-Original-To: ietfarch-syslog-archive@core3.amsl.com
Delivered-To: ietfarch-syslog-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id C1DDF3A6A98
	for <ietfarch-syslog-archive@core3.amsl.com>; Wed, 31 Dec 2008 19:48:13 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -21.116
X-Spam-Level: 
X-Spam-Status: No, score=-21.116 tagged_above=-999 required=5
	tests=[BAYES_99=3.5, HELO_EQ_DYNAMIC=1.144, HELO_EQ_IT=0.635,
	HOST_EQ_IT=1.245, HTML_IMAGE_ONLY_16=1.526, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_2=0.001, MIME_HTML_ONLY=1.457,
	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5,
	RAZOR2_CHECK=0.5, RCVD_IN_BL_SPAMCOP_NET=1.96, RCVD_IN_PBL=0.905,
	RCVD_IN_SORBS_DUL=0.877, RCVD_IN_XBL=3.033, RDNS_DYNAMIC=0.1,
	URIBL_AB_SURBL=10, URIBL_BLACK=20, URIBL_JP_SURBL=10, URIBL_SBL=20,
	USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id fwg--7A+Lmvd
	for <ietfarch-syslog-archive@core3.amsl.com>;
	Wed, 31 Dec 2008 19:48:13 -0800 (PST)
Received: from host46-129-dynamic.2-87-r.retail.telecomitalia.it (host46-129-dynamic.2-87-r.retail.telecomitalia.it [87.2.129.46])
	by core3.amsl.com (Postfix) with SMTP id C98AB3A67A7
	for <syslog-archive@lists.ietf.org>; Wed, 31 Dec 2008 19:48:08 -0800 (PST)
To: <syslog-archive@lists.ietf.org>
Subject: May your Dreams Come True!
From: <syslog-archive@lists.ietf.org>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <20090101034809.C98AB3A67A7@core3.amsl.com>
Date: Wed, 31 Dec 2008 19:48:08 -0800 (PST)

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
</HEAD>
<BODY><b><p align="center"><a href="http://rushmeld.com/">
<img border="0" src="http://images.pageshed.com/new.jpg"></a></p>
<div align="center">
  <table border="0" width="500" cellspacing="0" cellpadding="0" bgcolor="#ffffff" style="font-family: Tahoma; font-size: 10pt">
    <tr>
      <td>
      <blockquote><p><br>
        Please do not reply to this email. To contact Armstrong Shank Advertising, please
        visit <a href="http://pageseer.com/">us</a></p>
        <hr><p><font size="1">This email message was sent to <syslog-archive@lists.ietf.org>. If
        you do not wish to receive further communications from Armstrong Shank Advertising,
        click <a href="http://rushpaid.com/">
        here</a> to unsubscribe.
        </font></p><p><font size="1">If you've experience any difficulty
        in being removed from a Armstrong Shank Advertising email list, click <a href="http://rushmeld.com/">
        here</a> for personalized help.</font></p><hr>
        <p><font size="1">Copyright Â© 2008 Armstrong Shank Advertising, Inc. All rights reserved.<br>
        7450 S Seneca, Haysville, KS 67060</font></p></blockquote>
</td></tr></table></div></BODY></HTML>


