Over the last few weeks I have been getting this piece of spam and it is
bypassing the filters. My set up is a local user (running all email through
procmail) with the following .procmailrc lines:
:0fw: spamassassin.lock
| /home/lww/sausr/bin/spamassassin
:0:
* ^X-Spam-Status: Yes
spambox
I have also ran the spam through as a test using spamassassin -t and get the
error
Cannot open bayes_path /home/lww/.spamassassin/bayes R/O:
My bayes path is set to the default as is my installation. Below is the
piece of spam I am getting with all the headers (I have slightly changed
those that pertain to my address to spoil any lurker attempts, if anyone
needs the masked info, email me.)
One thing I have noticed on several pieces of spam is the use of the
alternet chars in place of letters (l33t sp34k). Are there any plans to
work out some filters for these spams? I am also interested in the text
strings at the bottom, are these ID strings?
Thanks,
Stephen Phariss
[EMAIL PROTECTED]
X-POP3-Rcpt: [EMAIL PROTECTED]
Received: from usa.com (pc2-tall1-5-cust107.dbln.cable.ntl.com
[81.98.89.107])
by host5.masked.com (8.11.6/8.11.6) with SMTP id h5PN9pa14033
for <[EMAIL PROTECTED]>; Wed, 25 Jun 2003 19:09:52 -0400
Received: from unknown (52.238.226.151)
by smtp18.yenddx.com with asmtp; 25 Jun 2003 20:57:38 -1000
Received: from unknown (198.177.245.84)
by mail.gimmicc.net with SMTP; Wed, 25 Jun 2003 10:54:06 +1200
Message-ID: <[EMAIL PROTECTED]>
Reply-To: "Rudolph Penner" <[EMAIL PROTECTED]>
From: "Rudolph Penner" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: unbelievable...........check this site out
Date: Wed, 25 Jun 2003 13:46:59 -0900
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2615.200
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200
X-Spam-Status: No, hits=0.0 required=5.0
tests=none
version=2.55
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
New registrati0ns, term renewal of every global Net name extensi0ns for just
$15.
Most popular: .net .biz .name
Just released: .shop .tech .med
N0 minimum terms or [EMAIL PROTECTED] out restrictions.
http://www.domainsforpeople.com
[EMAIL PROTECTED] me 0ff:
http://www.domainsforpeople.com/cgi-bin/off_list.pl
Have a nice day!
l2
HanvMnyinuwff
TpxvGirk
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.491 / Virus Database: 290 - Release Date: 6/18/2003
-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
