New SPAM e-mails recently?

Scott Silva ssilva at
Thu Nov 9 22:45:45 GMT 2006

Jason Williams spake the following on 11/9/2006 12:23 PM:
> Anyone been getting some new SPAM recently, where it comes in with
> subjects like:
> It's Lorenzo :)
> It's Flavia :)
> Bunch of names in the subject line.
> In the body of the message, it is a wide range of things like to buy
> viagra and cialis.
> Or a couple today are for buying stock (buy this symbol) etc.
> Anyone been getting these? Im still getting my SA rules back in order.
> Wasn't sure if any of these were sneaking through to anyone else.
> For those that are blocking, what is catching it so I can quickly put it
> in?
> Thanks,
> -Jason
Mine usually hit these;
3.50	BAYES_99	Bayesian spam probability is 99 to 100%
2.17	DCC_CHECK	Listed in DCC (
2.50	DIGEST_MULTIPLE	Message hits more than one network digest check
1.00	FORGED_RCVD_HELO	Received: contains a forged HELO
1.50	RAZOR2_CF_RANGE_51_100	Razor2 gives confidence level above 50%
1.50	RAZOR2_CF_RANGE_E4_51_100	Razor2 gives engine 4 confidence level above 50%
1.50	RAZOR2_CHECK	Listed in Razor2 (
1.56	RCVD_IN_BL_SPAMCOP_NET	Received via a relay in
2.05	RCVD_IN_SORBS_DUL	SORBS: sent directly from dynamic IP address
1.66	SARE_CSBIG	Only Mexican food gives me an Explosive Gain.
1.66	SARE_MLB_Stock1	
1.66	SARE_MLB_Stock5	Mentions stock symbol, tickers, or OTC.
1.07	SPF_NEUTRAL	SPF: sender does not match SPF record (neutral)

Some variation, but mostly in the SARE rules and the digests.


MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

More information about the MailScanner mailing list