Spam from hotmail,yahoo and live.com getting throught

JC Putter jcputter at numata.co.za
Sat Dec 20 09:47:41 GMT 2008


How can i setup mailscanner to do those URI,DNS blacklist checks???

That is what i need,

Thank you very much for the reply...

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Scott Silva
Sent: 19 December 2008 08:41 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: Spam from hotmail,yahoo and live.com getting throught

on 12-19-2008 5:20 AM JC Putter spake the following:
> Sorry
>
> http://pastebin.com/maf68d54
>
> there the full raw message,
>
Here is my hits;

Content analysis details:   (12.9 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see <http://www.spamcop.net/bl.shtml?78.107.55.51>]
 1.5 RCVD_IN_UCE_PFSM_1     RBL: Received via a relay in UCE_PFSM_1
                            [78.107.55.51 listed in dnsbl-1.uceprotect.net]
 3.0 RCVD_IN_BACKSCATTER    RBL: Received via a relay in Backscatter.org
                            [65.54.246.148 listed in ips.backscatterer.org]
 1.5 RCVD_IN_UCE_PFSM_3     RBL: Received via a relay in UCE_PFSM_3
                            [78.107.55.51 listed in dnsbl-3.uceprotect.net]
 1.5 RCVD_IN_UCE_PFSM_2     RBL: Received via a relay in UCE_PFSM_2
                            [78.107.55.51 listed in dnsbl-2.uceprotect.net]
 2.0 LOCALPART_IN_SUBJECT   Local part of To: address appears in Subject
 1.1 URIBL_RHS_DOB          Contains an URI of a new domain (Day Old Bread)
                            [URIs: linkvark.com]
-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                            [score: 0.0055]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 2.9 DCC_CHECK              Listed in DCC (http://rhyolite.com/anti-spam/dcc/)


It could be that it hit higher now that it has been in the wild for a while.



--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!



__________ Information from ESET NOD32 Antivirus, version of virus signature database 3373 (20080821) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com



__________ Information from ESET NOD32 Antivirus, version of virus signature database 3373 (20080821) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com



This message has been scanned by Nexus Mail Gateway



More information about the MailScanner mailing list