Obvious Spam - not picked up.

[Martin Hepworth]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Mailscanner wrote:
> Martin Hepworth wrote:
> 
>> Mailscanner wrote:
>>
>>> I've searched the archives and couldnt find anything exactly like 
>>> this, so here goes ....
>>>
>>>
>>> This is a part of an email that I receive regularly;
>>>
>>>
>>> Subject: {Spam?} The Investor Communiqué
>>> Date: Wed, 06 Jul 2005 06:28:31 +0000
>>> MIME-Version: 1.0
>>> Content-Type: text/plain
>>> Content-Transfer-Encoding: base64
>>> X-yyyyy-MailScanner-Information: Please contact the ISP for more 
>>> information
>>> X-yyyyy-MailScanner: Found to be clean
>>> X-yyyyy-MailScanner-SpamCheck: spam, SpamAssassin (score=2.298, 
>>> required 2,
>>>     BAYES_80 2.00, MIME_BASE64_TEXT 0.30)
>>> X-yyyyy-MailScanner-SpamScore: ss
>>> X-yyyyy-MailScanner-From: nickolasnobleku at midcoast.com
>>>
>>> U2VudGljb3JlIEluYy4oT1RDLkJCOlNOSU8pDQpBdmVyYWdlIERhaWx5IFZv
>>> bHVtZSAoOTAgRGF5KTogNTkzLDAwMCBzaGFyZXMgIChTb3VyY2U6IFlhaG9v
>>> IEZpbmFuY2UpDQpIYXMgSW50cm9kdWNlZCBMb2JvUG9rZXIgVGhyb3VnaCBp
>>> dHMgTmV3ZXN0IFN1YnNpZGlhcnkgTG9ib0dhbWluZywgYSBHYW1pbmcNClNv
>>> ZnR3YXJlIERldmVsb3BtZW50IGFuZCBMaWNlbnNpbmcgQ29tcGFueS4gKFNv
>>> dXJjZTogTmV3czogNi8xNy8wNSApDQoNCkN1cnJlbnQgUHJpY2U6IC4wMjQN
>>>
>>>
>>> Is this not being picked up because its base64 encoded ?
>>> What is the best way to deal with this sort of spam ?
>>>
>>> I'm running Mailscanner 4.42.9 on Centos 4.1 i386.
>>>
>>> Thanks.
>>>
>>>
>>
>> Depends on what extra SA rules you have installed, and what SA options 
>> (like URI-RBL's) are running also.
>>
>>
> Thanks for the quick reply martin,
> 
> 
> I'm just running the bog standard spamassasin that comes with Centos 4.1 
> (updated to 3.0.4) and the Standard install of Mailscanner. No mods.
> 
> I suppose I need to read up on the rules.
> 
> 
>

There's some stuff in the MS wiki on this, also check you're running the 
URI-RBL's which can be very usefull too (from memory the RH RPM's have 
this switched off by default)
-- 
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!