How do I beat this spam?

Alex Broens ms-list at alexb.ch
Wed Jun 23 15:55:15 IST 2010


On 2010-06-23 16:36, Peter Ong wrote:
> Hello Everyone,
> 
> How do I beat an email that arrives this way? The email is pasted
> underneath here.
> 
> You see, because the email comes this way, when it shows in the mail
> reader, none of the form tags and other tags I have specified to be
> disallowed are disarmed by MailScanner. Also, I don't know if
> spamassassin is scanning the email in this form or in the html
> rendered form; I think it scans it in this form. Anyway, I have
> sa-learned this message previously but it still got through a second
> time. Does anyone have a solution or a suggestion on how to
> effectively filter this message?
> 
> p
> 
> 
> 
> === BEGIN EMAIL === Return-Path: sunao-i at hot.dog.cx Received: from
> mail021.dti (LHLO mail021.dti) (10.5.4.195) by mail021.dti with LMTP;
> Wed, 23 Jun 2010 05:51:33 -0700 (PDT) Received: from gateway005.inf
> (gateway005.inf [10.5.4.196]) by mail021.dti (Postfix) with ESMTP id
> 2C46658200E2 for <peter at changed.this>; Wed, 23 Jun 2010 05:51:32
> -0700 (PDT) X-Spam-Status: No X-DTi-MailScanner-From:
> sunao-i at hot.dog.cx X-DTi-MailScanner-SpamScore: ssss 
> X-DTi-MailScanner: Found to be clean X-DTi-MailScanner-ID:
> B65485731B.A97E0 X-DTi-MailScanner-Information: Please contact the
> ISP for more information Received: from hot.dog.cx (unknown
> [208.92.232.69]) by gateway005.inf (Postfix) with ESMTP id B65485731B
>  for <peter at changed.this>; Wed, 23 Jun 2010 05:51:22 -0700 (PDT) 
> Subject: =?ISO-2022-JP?B?GyRCQihGfEgvQXdDVxsoQg==?= 
> =?ISO-2022-JP?B?GyRCJDckXiQ5ISMjMRsoQg==?= 
> =?ISO-2022-JP?B?GyRCS2cjMiMwIzAxXxsoQg==?= 
> =?ISO-2022-JP?B?GyRCJE5MNT0kQDUjRBsoQg==?= 
> =?ISO-2022-JP?B?GyRCI1YjRBsoQg==?= From:
> =?ISO-2022-JP?B?GyRCQ2YkQCQ3ISZHKBsoQg==?= 
> =?ISO-2022-JP?B?GyRCJGwkXiRzNF04KxsoQg==?= 
> =?ISO-2022-JP?B?GyRCJCgbKEI=?= <sunao-i at hot.dog.cx> To:
> <maintenance at dtiserv2.com> MIME-Version: 1.0 Content-Type:
> multipart/alternative; 
> boundary="7cbbc409ec990f19c78c75bd1e06f215_31691a2a5700b5f0d5507eac0e17ab95"
>  X-Message-Info:
> <luXiyt1ZAOmucvSctVMIo2aB9Us81_pDrZ6DytfPL*UFv_ISPkalanZpanO~Auh56S-I-JR5mcRS_7GU>
>  Message-Id: <20100623125123.B65485731B at gateway005.inf> Date: Wed, 23
> Jun 2010 05:51:22 -0700 (PDT)
> 
> 
> --7cbbc409ec990f19c78c75bd1e06f215_31691a2a5700b5f0d5507eac0e17ab95 
> Content-Type: text/html; Content-Transfer-Encoding: base64

Please do not post spams to the list.
Posting a Base64 encoded spam and hope somebody opens it is a bit of
wishful thinking.

Please use http://pastebin.com and post the decoded body (you MUA should
be able to decode it) including headers and send the pastebin link to 
the list

Without a readable body its anybody guess what its all about.

Alex


More information about the MailScanner mailing list