Kami,
 Congratulations, you now have the high score on my server for spam weight
:)

Scott, unless they have changed the math since I went to school...does this
look right ?

Unless Declude scanned Kami's txt attachment, I cant figure out for the life
of me how it scored 4348 (no I have not looked through the logs yet).

I've attached the headers.

Happy New Year to all ... It's off to the club for some adult refreshments !

Fritz

Frederick P. Squib, Jr.
Network Operations/Mail Administrator
Citizens Telephone Company of Kecksburg
http://www.wpa.net

()  ascii ribbon campaign - against html mail 
/\                        - against microsoft attachments

--------

Received: from declude.com [24.107.232.14] by wpa.net with ESMTP
  (SMTPD32-7.15) id A88E4F48009A; Wed, 31 Dec 2003 18:15:26 -0500
Received: from clickandpledge.com [12.5.20.81] by declude.com with ESMTP
  (SMTPD32-7.06) id A78BDD003A0; Wed, 31 Dec 2003 18:11:07 -0500
Received: from kr [12.5.20.116] by clickandpledge.com with ESMTP
  (SMTPD32-8.05) id A76ECA50054; Wed, 31 Dec 2003 18:10:38 -0500
From: "Kami Razvan" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: [W~ 4348][Declude.JunkMail] Nigerian scam...
Date: Wed, 31 Dec 2003 18:10:27 -0500
Organization: ClickandPledge.com
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_0021_01C3CFC9.5E6D1890"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: AcPP80TQvWxiXpTtQ3CqZpdrL1l34g==
Message-Id: <[EMAIL PROTECTED]>
X-Declude-Sender: [EMAIL PROTECTED] [12.5.20.116]
X-Declude-Spoolname: D576e0ca500546878.SMD
X-Note: Report abuse to:  [EMAIL PROTECTED]
X-Note: Sent from: [EMAIL PROTECTED] ([12.5.20.116])
X-Note: Sent from Reverse DNS:  kr.desk.foroosh.com
X-Note: This E-mail was scanned by Declude [1.77i9] for virus.
Organization: ClickandPledge.com
X-CYBERsitter-SpamManager-In: FAILED - Score Adult: 0 (Req: 18) Spam: 46
(Req: 18) Tot: 44 (Req: 20)
X-CYBERsitter-SpoolFile: D578b0dd003a05aa5.SMD
X-CYBERsitter-Sender: [EMAIL PROTECTED] [12.5.20.81]
X-Note: This E-mail was scanned for viruses by Declude Virus
(www.declude.com)
X-NRecips: 1
X-Reverse-IP: mail.clickandpledge.com
X-Weight: 2 (SPFUNKNOWN, HEUR10, SPAMCHK, ALLIGATE)
X-Country-Chain: UNITED STATES->destination.
X-Declude-Sender: [EMAIL PROTECTED] [12.5.20.81]
X-Declude-Spoolname: D578b0dd003a05aa5.SMD
X-Declude-Date: 12/31/2003 23:10:27 [1]
Precedence: bulk
Sender: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
X-RBL-Warning: FILTER-BODY: Message failed FILTER-BODY test (line 416,
weight 149)
X-RBL-Warning: FILTER-CLIENT: Message failed FILTER-CLIENT test (line 22,
weight 3)
X-RBL-Warning: WEIGHT30: Weight of 4348 reaches or exceeds the limit of 32.
X-Declude-Sender: [EMAIL PROTECTED] [24.107.232.14]
X-Declude-Spoolname: D588e4f48009a5481.SMD
X-Note: This E-Mail was scanned by Declude JunkMail v1.77 for spam.
X-Spam-Tests-Failed: FILTER-BODY, FILTER-NIGERIAN, FILTER-CLIENT, WEIGHT20,
WEIGHT30
X-Country-Chain: UNITED STATES->destination.
X-Hello: declude.com
X-Note: SMTP Real From [EMAIL PROTECTED]
X-Note: This E-mail was sent from cpe-24-107-232-14.ma.charter.com
([24.107.232.14]).
X-Note: Total spam weight of this E-mail is 4348.
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 365800576
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan
Sent: Wednesday, December 31, 2003 6:10 PM
To: [EMAIL PROTECTED]
Subject: [W~ 4348][Declude.JunkMail] Nigerian scam...


http://www.sun-sentinel.com/news/local/florida/orl-asecnigerian23122303dec23
,0,4096704.story 

Lesson learned?

Use filters :)

Sample filter attached.. 

Regards,
Kami

---
[This E-mail scanned by Citizens Internet Services with Declude Virus.]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to