Do RBL's help at all? Can you turn on full spamassassin reports so we can see what rules it hit?<br><br><div class="gmail_quote">On Thu, Jul 2, 2009 at 3:39 PM, Alessandro Bianchi <span dir="ltr"><<a href="mailto:alex@skynet-srl.com">alex@skynet-srl.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div text="#000000" bgcolor="#ffffff">
Hi guys<br>
<br>
Those damned spemmers have found a way to break in<br>
<br>
After image only spam, they have managed to build plain text only spam
(no links or hrml or images, just text) that slips throught my MS
installation.<br>
<br>
They often place in ortographic errors to "fool" spamassassin.<br>
<br>
Here is an example:<br>
<<< START -- destination address has been maqued <br>
<br>
<pre>From - Mon Jun 29 15:03:22 2009
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <a href="mailto:bivalved@rojax.com" target="_blank"><bivalved@rojax.com></a>
X-Original-To: xxxxxxxxxxxxxxxxxxxxxx
Delivered-To: xxxxxxxxxxxxxxxxxxxxxxxx
X-Greylist: delayed 312 seconds by postgrey-1.30 at Log; Sun, 28 Jun 2009 15:09:01 CEST
Received: from <a href="http://jtuxl.forthnet.gr" target="_blank">jtuxl.forthnet.gr</a> (<a href="http://adsl144-208.lsf.forthnet.gr" target="_blank">adsl144-208.lsf.forthnet.gr</a> [79.103.75.208])
by <a href="http://cdnet02.cdnet.it" target="_blank">cdnet02.cdnet.it</a> (Postfix) with SMTP id A17793880EF
for <xxxxxxxxxxxxxxxxx>; Sun, 28 Jun 2009 15:09:01 +0200 (CEST)
Date: Sun, 28 Jun 2009 13:09:04 +0100
Content-Type: text/plain;
charset="windows-1256"
From: "kayaker"<a href="mailto:bivalved@rojax.com" target="_blank"><bivalved@rojax.com></a>
MIME-Version: 1.0
To: xxxxxxxxxxxxxxxxxxxxxxx
Message-ID: <a href="mailto:x7V604791328Pspc0cNmxMjk@manetasmetal.gr" target="_blank"><x7V604791328Pspc0cNmxMjk@manetasmetal.gr></a>
Subject: How To Make A iGprl As Hot As Paris Hilton Achieve Multiple Orgasms
X-skynet-srl-MailScanner-ID: A17793880EF.A13C2
X-MailScanner: Found to be clean
X-MailScanner-SpamScore: s
X-MailScanner-From: <a href="mailto:bivalved@rojax.com" target="_blank">bivalved@rojax.com</a>
X-skynet-srl-MailScanner-Watermark: 1246799344.38984@X6K8Q1cEZ6QnFvmnvQtBwQ
X-Spam-Status: No
Hfow To Make A Girl Ass Hot As Paris Hilton Achieve Multiple Orgasms www. pill20. com. Girl, 5, Forced To Apologize For Hugging Claassmate
</pre>
<<<< END<br>
<br>
Blocking the from address is completely useless since it is randomly
changed and the same is for subject and text content.<br>
<br>
Has anyone else seen a similar behaviour and found a solution?<br>
<br>
Thank you ad best regards<br>
<br>
Alessandro<br>
<br>
<div>-- <br>
<p><b>SkyNet SRL</b></p>
<p>P.zza XXV Aprile 14 - 28021 Borgomanero (NO) - ITALY</p>
<p>Tel. +39 0322 836487/834765 - Fax.+39 0322.836608</p>
<p><a href="mailto:info@skynet-srl.com" target="_blank">info@skynet-srl.com</a> -<a href="http://www.skynet-srl.com" target="_blank"><span>www.skynet-srl.com</span></a></p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
<p>Le informazioni contenute in questo messaggio sono
riservate e confidenziali e ne é vietata la diffusione in qualunque
forma.</p>
<p>Qualora Lei non fosse la persona a cui il presente
messaggio é destinato, La invitiamo ad eliminarlo dandocene
gentilmente comunicazione.</p>
<p>Per qualsiasi informazione in merito si prega di
contattare <a href="mailto:info@skynet-srl.com" target="_blank"><span>info@skynet-srl.com</span></a>.
(
Rif. D.L. 196/200 )</p>
<br>
</div>
</div>
<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br><br clear="all"><br>-- <br>Alex Neuman van der Hans<br>Reliant Technologies<br>+507 6781-9505<br>+507 202-1525<br><a href="mailto:alex@rtpty.com">alex@rtpty.com</a><br>Skype: alexneuman<br>