Obvious Spam - not picked up.

Mailscanner mailscanner at MCKERRS.NET
Wed Jul 6 13:51:48 IST 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Martin Hepworth wrote:

> Mailscanner wrote:
>
>> I've searched the archives and couldnt find anything exactly like 
>> this, so here goes ....
>>
>>
>> This is a part of an email that I receive regularly;
>>
>>
>> Subject: {Spam?} The Investor Communiqué
>> Date: Wed, 06 Jul 2005 06:28:31 +0000
>> MIME-Version: 1.0
>> Content-Type: text/plain
>> Content-Transfer-Encoding: base64
>> X-yyyyy-MailScanner-Information: Please contact the ISP for more 
>> information
>> X-yyyyy-MailScanner: Found to be clean
>> X-yyyyy-MailScanner-SpamCheck: spam, SpamAssassin (score=2.298, 
>> required 2,
>>     BAYES_80 2.00, MIME_BASE64_TEXT 0.30)
>> X-yyyyy-MailScanner-SpamScore: ss
>> X-yyyyy-MailScanner-From: nickolasnobleku at midcoast.com
>>
>> U2VudGljb3JlIEluYy4oT1RDLkJCOlNOSU8pDQpBdmVyYWdlIERhaWx5IFZv
>> bHVtZSAoOTAgRGF5KTogNTkzLDAwMCBzaGFyZXMgIChTb3VyY2U6IFlhaG9v
>> IEZpbmFuY2UpDQpIYXMgSW50cm9kdWNlZCBMb2JvUG9rZXIgVGhyb3VnaCBp
>> dHMgTmV3ZXN0IFN1YnNpZGlhcnkgTG9ib0dhbWluZywgYSBHYW1pbmcNClNv
>> ZnR3YXJlIERldmVsb3BtZW50IGFuZCBMaWNlbnNpbmcgQ29tcGFueS4gKFNv
>> dXJjZTogTmV3czogNi8xNy8wNSApDQoNCkN1cnJlbnQgUHJpY2U6IC4wMjQN
>>
>>
>> Is this not being picked up because its base64 encoded ?
>> What is the best way to deal with this sort of spam ?
>>
>> I'm running Mailscanner 4.42.9 on Centos 4.1 i386.
>>
>> Thanks.
>>
>>
>
> Depends on what extra SA rules you have installed, and what SA options 
> (like URI-RBL's) are running also.
>
>
Thanks for the quick reply martin,


I'm just running the bog standard spamassasin that comes with Centos 4.1 
(updated to 3.0.4) and the Standard install of Mailscanner. No mods.

I suppose I need to read up on the rules.


Cheers,

Brian.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list