Tiny text only spam (semi OT)

[Alex Neuman]

Do RBL's help at all? Can you turn on full spamassassin reports so we can
see what rules it hit?

On Thu, Jul 2, 2009 at 3:39 PM, Alessandro Bianchi <alex at skynet-srl.com>wrote:

>  Hi guys
>
> Those damned spemmers have found a way to break in
>
> After image only spam, they have managed to build plain text only spam (no
> links or hrml or images, just text) that slips throught my MS installation.
>
> They often place in ortographic errors to "fool" spamassassin.
>
> Here is an example:
> <<< START -- destination address has been maqued
>
> From - Mon Jun 29 15:03:22 2009
> X-Mozilla-Status: 0001
> X-Mozilla-Status2: 00000000
> Return-Path: <bivalved at rojax.com> <bivalved at rojax.com>
> X-Original-To: xxxxxxxxxxxxxxxxxxxxxx
> Delivered-To: xxxxxxxxxxxxxxxxxxxxxxxx
> X-Greylist: delayed 312 seconds by postgrey-1.30 at Log; Sun, 28 Jun 2009 15:09:01 CEST
> Received: from jtuxl.forthnet.gr (adsl144-208.lsf.forthnet.gr [79.103.75.208])
> 	by cdnet02.cdnet.it (Postfix) with SMTP id A17793880EF
> 	for <xxxxxxxxxxxxxxxxx>; Sun, 28 Jun 2009 15:09:01 +0200 (CEST)
> Date: Sun, 28 Jun 2009 13:09:04 +0100
> Content-Type: text/plain;
>  charset="windows-1256"
> From: "kayaker"<bivalved at rojax.com> <bivalved at rojax.com>
> MIME-Version: 1.0
> To: xxxxxxxxxxxxxxxxxxxxxxx
> Message-ID: <x7V604791328Pspc0cNmxMjk at manetasmetal.gr> <x7V604791328Pspc0cNmxMjk at manetasmetal.gr>
> Subject: How To Make A iGprl As Hot As Paris Hilton Achieve Multiple Orgasms
> X-skynet-srl-MailScanner-ID: A17793880EF.A13C2
> X-MailScanner: Found to be clean
> X-MailScanner-SpamScore: s
> X-MailScanner-From: bivalved at rojax.com
> X-skynet-srl-MailScanner-Watermark: 1246799344.38984 at X6K8Q1cEZ6QnFvmnvQtBwQ
> X-Spam-Status: No
>
> Hfow To Make A Girl Ass Hot As Paris Hilton Achieve Multiple Orgasms www. pill20. com. Girl, 5, Forced To Apologize For Hugging Claassmate
>
>
> <<<< END
>
> Blocking the from address is completely useless since it is randomly
> changed and the same is for subject and text content.
>
> Has anyone else seen a similar behaviour and found a solution?
>
> Thank you ad best regards
>
> Alessandro
>
> --
>
> *SkyNet SRL*
>
> P.zza XXV Aprile 14 - 28021 Borgomanero (NO) - ITALY
>
> Tel. +39 0322 836487/834765 - Fax.+39 0322.836608
>
> info at skynet-srl.com -www.skynet-srl.com
>
>
>
>
>  Le informazioni contenute in questo messaggio sono riservate e
> confidenziali e ne é vietata la diffusione in qualunque forma.
>
> Qualora Lei non fosse la persona a cui il presente messaggio é destinato,
> La invitiamo ad eliminarlo dandocene gentilmente comunicazione.
>
> Per qualsiasi informazione in merito si prega di contattare
> info at skynet-srl.com. ( Rif. D.L. 196/200 )
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>


-- 
Alex Neuman van der Hans
Reliant Technologies
+507 6781-9505
+507 202-1525
alex at rtpty.com
Skype: alexneuman
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090702/67f6f998/attachment.html