I can not seem to stop these emails...

Scott Silva ssilva at SGVWATER.COM
Mon Nov 7 20:56:11 GMT 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Rob spake the following on 11/7/2005 6:47 AM:
> Right i have that, although it seems to be over a year old.... . These
> emails are kind of new with respect to how they are made... the word
> Viagra is not in the email at all so i guess that rule will not work,
> although Viagra does show in the email when its viewed...
>  
> you can see 2 examples of the emails here...
>  
> http://www.dido.ca/spam/drug.txt
>  
> Thanks...

The first one shows up in DCC, Pyzor and Razor, and scores ;
 2.3 FROM_LOCAL_NOVOWEL     From: localpart has series of non-vowel letters
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
                            above 50%
                            [cf: 100]
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 2.8 PYZOR_CHECK            Listed in Pyzor (http://pyzor.sf.net/)
 1.4 DCC_CHECK              Listed in DCC
(http://rhyolite.com/anti-spam/dcc/)
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
address
                            [70.49.221.195 listed in dnsbl.sorbs.net]
 0.2 DIGEST_MULTIPLE        Message hits more than one network digest check
 0.0 UPPERCASE_25_50        message body is 25-50% uppercase




-- 

/-----------------------\           |~~\_____/~~\__  |
| MailScanner; The best |___________ \N1____====== )-+
| protection on the net!|                   ~~~|/~~  |
\-----------------------/                      ()

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list