This is what [EMAIL PROTECTED] gets mailed, every time spam is cesspitted. Cesspitting doesn't just mean that an smtp 550 refusal is given, it also means that the mail is saved to a quarantine directory - so no mail ever gets "lost" to the recipient.
I have cron run a script every night with a summary of what has been refused the previous 24 hours.
I admit to having marked up most of the RBL points. I've done it in the light of my own empirical experience, YMMV.
Sorry that it doesn't fit into the 76 character corset ...
Tony __________________________________________________________________________
Unsolicited bulk email from: [EMAIL PROTECTED] Subject: Free Golf Wedge - Best in the World!
The message WAS NOT delivered to: <[EMAIL PROTECTED]>: 550 5.7.1 Message content rejected, UBE, id=29685-02
The message has been quarantined as: /var/amavis/quarantine/spam-20030713-210632-29685-02.gz
SpamAssassin report: Spam detection software, running on the system "billy.demon.nl", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block similar future email. If you have any questions, see [EMAIL PROTECTED] for details.
Content preview: URI:http://www.freegolfwedge.com/images/title.gif We are so confident in our custom clubs, we are willing to send you one of our custom wedges for you to keep, play with and you pay nothing for the club. [...]
Content analysis details: (38.4 points, 6.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.8 SUB_FREE_OFFER Subject starts with "Free"
3.8 DATE_SPAMWARE_Y2K Date header uses unusual Y2K formatting
0.2 ORDER_NOW BODY: Encourages you to waste no time in ordering
1.8 SUPPLIES_LIMITED BODY: Supplies are Limited
0.0 HTML_30_40 BODY: Message is 30% to 40% HTML
0.4 HTML_IMAGE_ONLY_12 BODY: HTML: images with 1000-1200 bytes of words
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_FONT_BIG BODY: HTML has a big font
0.8 HTML_IMAGE_RATIO_14 BODY: HTML has a low ratio of text to image area
0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here"
0.6 MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset
1.0 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
2.0 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
[200.95.90.194 listed in dnsbl.sorbs.net]
3.7 RCVD_IN_OPM RBL: Received via a relay in opm.blitzed.org
[200.95.90.194 listed in opm.blitzed.org]
1.0 RCVD_IN_SORBS_MISC RBL: SORBS: sender is open proxy server
[200.95.90.194 listed in dnsbl.sorbs.net]
1.0 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
[200.95.90.194 listed in dnsbl.sorbs.net]
1.0 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
[200.95.90.194 listed in dnsbl.njabl.org]
3.7 RCVD_IN_OPM_HTTP RBL: OPM: sender is open HTTP CONNECT proxy
[200.95.90.194 listed in opm.blitzed.org]
1.0 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[<http://dsbl.org/listing?ip=200.95.90.194>]
2.0 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[200.95.90.194 listed in dnsbl.njabl.org]
3.7 RCVD_IN_OPM_SOCKS RBL: OPM: sender is open SOCKS proxy
[200.95.90.194 listed in opm.blitzed.org]
3.7 RCVD_IN_OPM_HTTP_POST RBL: OPM: sender is open HTTP POST proxy
[200.95.90.194 listed in opm.blitzed.org]
1.5 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.4 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
1.1 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.6 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
1.2 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
0.0 CLICK_BELOW Asks you to click below
------------------------- BEGIN HEADERS -----------------------------
Received: from punt-15.mail.nl.demon.net (punt-15.mail.nl.demon.net [194.159.73.24])
by billy.demon.nl (Postfix) with SMTP
for <[EMAIL PROTECTED]>; Sun, 13 Jul 2003 21:06:19 +0200 (CEST)
Received: from punt-12.mail.nl.demon.net by mailstore for [EMAIL PROTECTED]
id 1058122741:12:16062:9; Sun, 13 Jul 2003 18:59:01 GMT
Received: from relay-14.mail.nl.demon.net ([194.159.73.29])
by punt-17.mail.nl.demon.net id aa1725178; 13 Jul 2003 18:58 GMT
Received: from [200.95.90.194] (helo=dsl-200-95-90-194.prodigy.net.mx)
by relay-14.mail.nl.demon.net with smtp (Exim 3.36 #1)
id 19bm3L-000PJx-00
for [EMAIL PROTECTED]; Sun, 13 Jul 2003 18:58:32 +0000
Received: from [195.78.119.12] by dsl-200-95-90-194.prodigy.net.mx id <7449289-36572>; Sun, 13 Jul 2003 21:52:25 +0200
Message-ID: <[EMAIL PROTECTED]>
From: "Loyd Vargas" <[EMAIL PROTECTED]>
Reply-To: "Loyd Vargas" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Free Golf Wedge - Best in the World!
Date: Sun, 13 Jul 03 21:52:25 GMT
X-Mailer: Microsoft Outlook Express 5.00.2615.200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="21BEBEDF7_1"
X-Priority: 3
X-MSMail-Priority: Normal
-------------------------- END HEADERS ------------------------------
-- Tony Earnshaw
I love the music of Wagner. The only sound that pleases me more is that of a cat outside my 9th floor window, trying to cling to the glass with its claws.
http://j-walk.com/blog/docs/conference.htm http://www.billy.demon.nl Mail: [EMAIL PROTECTED]
------------------------------------------------------- This SF.Net email sponsored by: Parasoft Error proof Web apps, automate testing & more. Download & eval WebKing and get a free book. www.parasoft.com/bulletproofapps1 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
