New SPAM e-mails recently?
ssilva at sgvwater.com
Thu Nov 9 22:45:45 GMT 2006
Jason Williams spake the following on 11/9/2006 12:23 PM:
> Anyone been getting some new SPAM recently, where it comes in with
> subjects like:
> It's Lorenzo :)
> It's Flavia :)
> Bunch of names in the subject line.
> In the body of the message, it is a wide range of things like to buy
> viagra and cialis.
> Or a couple today are for buying stock (buy this symbol) etc.
> Anyone been getting these? Im still getting my SA rules back in order.
> Wasn't sure if any of these were sneaking through to anyone else.
> For those that are blocking, what is catching it so I can quickly put it
Mine usually hit these;
3.50 BAYES_99 Bayesian spam probability is 99 to 100%
2.17 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
2.50 DIGEST_MULTIPLE Message hits more than one network digest check
1.00 FORGED_RCVD_HELO Received: contains a forged HELO
1.50 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
1.50 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level above 50%
1.50 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.56 RCVD_IN_BL_SPAMCOP_NET Received via a relay in bl.spamcop.net
2.05 RCVD_IN_SORBS_DUL SORBS: sent directly from dynamic IP address
1.66 SARE_CSBIG Only Mexican food gives me an Explosive Gain.
1.66 SARE_MLB_Stock5 Mentions stock symbol, tickers, or OTC.
1.07 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
Some variation, but mostly in the SARE rules and the digests.
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!
More information about the MailScanner