<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-15"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Il 03/07/2009 13:00, <a class="moz-txt-link-abbreviated" href="mailto:mailscanner-request@lists.mailscanner.info">mailscanner-request@lists.mailscanner.info</a> ha
scritto:
<blockquote style="font-size: medium; font-family: serif;"
cite="mid:200907031100.n63B023c025716@safir.blacknight.ie" type="cite">Alessandro
Bianchi wrote:
<br>
<blockquote type="cite" style="color: rgb(0, 0, 0);">Hi guys
<br>
<br>
Those damned spemmers have found a way to break in
<br>
<br>
After image only spam, they have managed to build plain text only spam
(no links or hrml or images, just text) that slips throught my MS
installation.
<br>
<br>
They often place in ortographic errors to "fool" spamassassin.
<br>
<br>
</blockquote>
Hi,
<br>
<br>
They are being detected as : Sanesecurity.Spam.10528
<br>
<br>
Cheers,
<br>
<br>
Steve
<br>
Sanesecurity
<br>
sanesecurity.com
</blockquote>
<br>
Thaks Steve for helping me<br>
<br>
I've just installed unofficial signs and sit here for looking at it
working!<br>
<br>
For Alex<br>
<br>
Very unfortunately RBLs don't help at all since SA decreases the score!<br>
<br>
Look at this:<br>
<br>
<table class="sa_rules_report" border="0" cellpadding="1"
cellspacing="2" width="100%">
<tbody>
<tr>
<td>-2.60</td>
<td>BAYES_00</td>
<td> </td>
</tr>
<tr>
<td>0.91</td>
<td>RCVD_IN_PBL</td>
<td> </td>
</tr>
<tr>
<td>0.10</td>
<td>RDNS_DYNAMIC</td>
<td> </td>
</tr>
<tr>
<td>1.42</td>
<td>SARE_ADULT2</td>
</tr>
</tbody>
</table>
<br>
Spamassassin reports it as BAYES_00 and clean message and that "kills"
the others checks.<br>
<br>
If I decrease the BAYES_00 score, it will likely break legitimate emails<br>
<br>
So I'm testing the unofficial signs and I'll let you know<br>
<br>
Thank you very much for your precious help!<br>
<br>
Alessandro<br>
<div class="moz-signature">-- <br>
<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-15">
<meta http-equiv="Content-Style-Type" content="text/css">
<title>email signature</title>
<style type="text/css">
p.p1 {margin: 0.0px 0.0px 0.0px 0.0px; text-align: center; font: 13.0px Arial; color: #1341f9}
p.p2 {margin: 0.0px 0.0px 0.0px 0.0px; text-align: center; font: 11.0px Arial; color: #ff5f0d}
p.p3 {margin: 0.0px 0.0px 0.0px 0.0px; text-align: center; font: 11.0px Arial; color: #0013f9}
p.p4 {margin: 0.0px 0.0px 0.0px 0.0px; text-align: center; font: 11.0px Arial; color: #1d24f9}
p.p5 {margin: 0.0px 0.0px 0.0px 0.0px; text-align: center; font: 11.0px Arial; color: #1d24f9; min-height: 12.0px}
p.p6 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 13.0px}
p.p7 {margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; color: #566880}
span.s1 {text-decoration: underline ; color: #0010e8}
span.s2 {text-decoration: underline ; color: #000beb}
</style>
<p class="p1"><b>SkyNet SRL</b></p>
<p class="p2">P.zza XXV Aprile 14 - 28021 Borgomanero (NO) - ITALY</p>
<p class="p3">Tel. +39 0322 836487/834765 - Fax.+39 0322.836608</p>
<p class="p4"><a class="moz-txt-link-abbreviated"
href="mailto:info@skynet-srl.com">info@skynet-srl.com</a> -<a
href="http://www.skynet-srl.com"><span class="s1">www.skynet-srl.com</span></a></p>
<p class="p5"><br>
</p>
<p class="p6"><br>
</p>
<p class="p6"><br>
</p>
<p class="p7">Le informazioni contenute in questo messaggio sono
riservate e confidenziali e ne é vietata la diffusione in qualunque
forma.</p>
<p class="p7">Qualora Lei non fosse la persona a cui il presente
messaggio é destinato, La invitiamo ad eliminarlo dandocene
gentilmente comunicazione.</p>
<p class="p7">Per qualsiasi informazione in merito si prega di
contattare <a href="mailto:info@skynet-srl.com"><span class="s2">info@skynet-srl.com</span></a>.
(
Rif. D.L. 196/200 )</p>
<br>
</div>
</body>
</html>