How to stop this spam

[anas asree]

The spam header

Received: from n2.bullet.mail.re3.yahoo.com (n2.bullet.mail.re3.yahoo.com [68.142.237.109])
      by abc.ptm.my (Postfix) with SMTP id 7BF664928B4
      for <7aff2004 at ptm.com>; Mon, 17 Mar 2008 03:13:18 +0800 (MYT)
 Received: from [68.142.237.87] by n2.bullet.mail.re3.yahoo.com with NNFMP; 16 Mar 2008 11:02:30 -0000
 Received: from [66.196.97.135] by t3.bullet.re3.yahoo.com with NNFMP; 16 Mar 2008 19:06:33 -0000
 Received: from [127.0.0.1] by omp108.mail.re3.yahoo.com with NNFMP; 16 Mar 2008 19:06:33 -0000
 X-Yahoo-Newman-Id: 419020.11902.bm at omp108.mail.re3.yahoo.com
 Message-ID: <419020.11902.bm at omp108.mail.re3.yahoo.com>
 Received: (qmail 22582 invoked from network); 16 Mar 2008 19:06:02 -0000
 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
   s=s1024; d=yahoo.co.uk;
 h=Received:X-YMail-OSG:X-Yahoo-Newman-Property:From:To:Reply-To:Subject:Date:MIME-Version:Content-type:Content-transfer-encoding;
 b=dyaMqEvTfAGfBq2uhN9YUggoN1kArAxKdYokNv5+/LzeoFTeKnsIyR43hDdSh2pF/JGSXhI95UehfP/N6NLKo3z1qkF7RUvF11+6++tCbVlx/wAiYloCenWURyO9XV0KviqAke6pAp6/RgoROJQ1UnC0E9WLlvVQNU1DuJDlAOk= ;
 Received: from unknown (HELO www.microsoft.com) (danniepennington2774 at 211.74.94.168 with login)
   by smtp115.plus.mail.re1.yahoo.com with SMTP; 16 Mar 2008 19:06:01 -0000
 X-YMail-OSG: psvhvSMVM1njT8UHFY4ICCqUf3VawsKR4VElwwIXv2g.5pv13BAg58V0GFm.nZJsyGH1_5LzAa48FpAf9JHtiGXYdDrevXTJXWJDzg--
 X-Yahoo-Newman-Property: ymail-5
 From: danniepennington2774 at yahoo.co.uk
 To: 7acidgroove at arnet.com.ar
 Reply-To: danniepennington2774 at yahoo.co.uk
 Subject: lovely ojg Shemales pvx uu vtn.
 Date: Sun, 16 Mar 2008 20:22:02 +0100
 MIME-Version: 1.0
 Content-type: text/plain; charset=windows-1251
 Content-transfer-encoding: 8bit

with spam record score
1.00
BAYES_00Bayesian spam probability is 0 to 1% 0.50
RAZOR2_CF_RANGE_51_100Razor2 gives confidence level above 50% 1.50
RAZOR2_CF_RANGE_E8_51_100Razor2 gives engine 8 confidence level above 50% 0.50
RAZOR2_CHECKListed in Razor2 (http://razor.sf.net/)

Sometimes it got hit with the above rules and other rules such as URIBL_BLACK, URIBL_JP_SURBL, but sometimes the spam was not caught by any rule except for Bayes_00

Scott Silva <ssilva at sgvwater.com> wrote: on 3-17-2008 9:12 PM Cheng Bruce spake the following:
> Hi,
> 
> I am not sure if you turn on RBL list. I got 12.4 points.
> 
> Content analysis details:   (12.4 points, 7.0 required)
> 
Probably because it was reported and showed up on the RBL's later.

Can you provide a complete copy of the message, with headers intact for testing?


-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 


       
---------------------------------
Looking for last minute shopping deals?  Find them fast with Yahoo! Search.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080318/d972bfdf/attachment.html