How to stop this spam

[Scott Silva]

on 3-18-2008 6:59 PM anas asree spake the following:
> The spam header
> 
> Received: from n2.bullet.mail.re3.yahoo.com 
> (n2.bullet.mail.re3.yahoo.com [68.142.237.109])
>      by abc.ptm.my (Postfix) with SMTP id 7BF664928B4
>      for <7aff2004 at ptm.com>; Mon, 17 Mar 2008 03:13:18 +0800 (MYT)
> Received: from [68.142.237.87] by n2.bullet.mail.re3.yahoo.com with 
> NNFMP; 16 Mar 2008 11:02:30 -0000
> Received: from [66.196.97.135] by t3.bullet.re3.yahoo.com with NNFMP; 16 
> Mar 2008 19:06:33 -0000
> Received: from [127.0.0.1] by omp108.mail.re3.yahoo.com with NNFMP; 16 
> Mar 2008 19:06:33 -0000
> X-Yahoo-Newman-Id: 419020.11902.bm at omp108.mail.re3.yahoo.com
> Message-ID: <419020.11902.bm at omp108.mail.re3.yahoo.com>
> Received: (qmail 22582 invoked from network); 16 Mar 2008 19:06:02 -0000
> Do mainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
> s=s1024; d=yahoo.co.uk;
> h=Received:X-YMail-OSG:X-Yahoo-Newman-Property:From:To:Reply-To:Subject:Date:MIME-Version:Content-type:Content-transfer-encoding;
> b=dyaMqEvTfAGfBq2uhN9YUggoN1kArAxKdYokNv5+/LzeoFTeKnsIyR43hDdSh2pF/JGSXhI95UehfP/N6NLKo3z1qkF7RUvF11+6++tCbVlx/wAiYloCenWURyO9XV0KviqAke6pAp6/RgoROJQ1UnC0E9WLlvVQNU1DuJDlAOk= 
> ;
> Received: from unknown (HELO www.microsoft.com) 
> (danniepennington2774 at 211.74.94.168 with login)
> by smtp115.plus.mail.re1.yahoo.com with SMTP; 16 Mar 2008 19:06:01 -0000
> X-YMail-OSG: 
> psvhvSMVM1njT8UHFY4ICCqUf3VawsKR4VElwwIXv2g.5pv13BAg58V0GFm.nZJsyGH1_5LzAa48FpAf9JHtiGXYdDrevXTJXWJDzg--
> X-Yahoo-Newman-Property: ymail-5
> From: danniepennington2774 at yahoo.co.uk
> To: 7acidgroove at arnet.com.ar
> Reply-To: danniepennington2774 at yahoo.co.uk
> Subject: lovely ojg She males pvx uu vtn.
> Date: Sun, 16 Mar 2008 20:22:02 +0100
> MIME-Version: 1.0
> Content-type: text/plain; charset=windows-1251
> Content-transfer-encoding: 8bit
> 
That is the headers, but still not a complete copy of the message.
Still I also managed to hit a score from spamcannibal with just the headers.
I have some custom blacklists with low scores, but they add up quite often.


-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 250 bytes
Desc: OpenPGP digital signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080319/49151b57/signature.bin