Spam from hotmail,yahoo and live.com getting throught
JC Putter
jcputter at numata.co.za
Sat Dec 20 09:47:41 GMT 2008
How can i setup mailscanner to do those URI,DNS blacklist checks???
That is what i need,
Thank you very much for the reply...
-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Scott Silva
Sent: 19 December 2008 08:41 PM
To: mailscanner at lists.mailscanner.info
Subject: Re: Spam from hotmail,yahoo and live.com getting throught
on 12-19-2008 5:20 AM JC Putter spake the following:
> Sorry
>
> http://pastebin.com/maf68d54
>
> there the full raw message,
>
Here is my hits;
Content analysis details: (12.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?78.107.55.51>]
1.5 RCVD_IN_UCE_PFSM_1 RBL: Received via a relay in UCE_PFSM_1
[78.107.55.51 listed in dnsbl-1.uceprotect.net]
3.0 RCVD_IN_BACKSCATTER RBL: Received via a relay in Backscatter.org
[65.54.246.148 listed in ips.backscatterer.org]
1.5 RCVD_IN_UCE_PFSM_3 RBL: Received via a relay in UCE_PFSM_3
[78.107.55.51 listed in dnsbl-3.uceprotect.net]
1.5 RCVD_IN_UCE_PFSM_2 RBL: Received via a relay in UCE_PFSM_2
[78.107.55.51 listed in dnsbl-2.uceprotect.net]
2.0 LOCALPART_IN_SUBJECT Local part of To: address appears in Subject
1.1 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread)
[URIs: linkvark.com]
-2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
[score: 0.0055]
0.0 HTML_MESSAGE BODY: HTML included in message
2.9 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
It could be that it hit higher now that it has been in the wild for a while.
--
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!
__________ Information from ESET NOD32 Antivirus, version of virus signature database 3373 (20080821) __________
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
__________ Information from ESET NOD32 Antivirus, version of virus signature database 3373 (20080821) __________
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
This message has been scanned by Nexus Mail Gateway
More information about the MailScanner
mailing list