[SAtalk] Re: image only spam question/help (fwd)

william f guyton jr Wed, 23 Jul 2003 18:47:22 -0700

On Wed, 2003-07-23 at 18:25, william f guyton jr wrote:

A good point, I have attached the two image spams I have been testing
the gateway with.


>  At 05:46 PM 7/23/2003 -0500, william f guyton jr wrote: 
> 
> > I am trying to up the score site wide using the local.cf file, I added the 
> > following to the local.cf file and resent three spams which are mostly 
> > images, and I dont see the HTML_IMAGE_ONLY_02
> > test being checked: running v2.55
> 
> I hate to point this out, but without an example file containing the 
> complete spam mail to test against, nobody is going to be able to explain 
> why the test isn't matching. 
> 
> As for your configfile, that looks OK to me. 
> 
>

>From [EMAIL PROTECTED] Wed Jul 23 23:36:19 2003
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 17715 invoked from network); 23 Jul 2003 23:36:19 -0000
Received: from gateway4.eamc.org (HELO rico.org) (65.83.121.228) by
        192.168.1.2 with SMTP; 23 Jul 2003 23:36:19 -0000
Received: from [66.80.168.124] (account <[EMAIL PROTECTED]>) by rico.org
        (CommuniGate Pro WebUser 4.0.6) with HTTP id 660824 for
        <[EMAIL PROTECTED]>; Thu, 24 Jul 2003 00:03:18 -0400
From: "Qmail" <[EMAIL PROTECTED]>
Subject: Fwd: [Fwd: Have Faith]
To: [EMAIL PROTECTED]
X-Mailer: CommuniGate Pro Web Mailer v.4.0.6
Date: Thu, 24 Jul 2003 00:03:18 -0400
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="_===660824====rico.org===_"
X-Evolution-Source: pop://[EMAIL PROTECTED]

This is a multi-part MIME message

--_===660824====rico.org===_
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 8bit




   --- the forwarded message follows ---

--_===660824====rico.org===_
Content-Type: message/rfc822

Return-Path: <[EMAIL PROTECTED]>
Received: from bb.informs.com ([216.248.165.160] verified) by rico.org
        (CommuniGate Pro SMTP 4.0.6) with SMTP id 660773 for [EMAIL PROTECTED]; Tue,
        22 Jul 2003 20:21:46 -0400
Received: (qmail 32441 invoked from network); 22 Jul 2003 19:41:44 -0000
Received: from unknown (HELO qmail) (192.168.1.2) by bb.informs.com with
        SMTP; 22 Jul 2003 19:41:44 -0000
Subject: [Fwd: Have Faith]
From: william f guyton jr <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Content-Type: multipart/alternative; boundary="=-v5uCA++Kl/K1aevYim8H"
Organization: informs
Message-Id: <[EMAIL PROTECTED]>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.4.0 
Date: 22 Jul 2003 15:39:10 -0500

*This message was transferred with a trial version of CommuniGate(tm) Pro*

--=-v5uCA++Kl/K1aevYim8H
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

-----Forwarded Message-----
From: abigail <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Have Faith
Date: 22 Jul 2003 15:20:14 -0500

  A few moments of your time could save you thousands over the life of
                 your loan! What are you waiting for? 

                               Visit Now
click here to unsubscribe. bqbYy9TYXRQqj
-- 
william f guyton jr
senior network engineer
informs
334.277.0372x133

--=-v5uCA++Kl/K1aevYim8H
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
  <META NAME="GENERATOR" CONTENT="GtkHTML/3.0.5">
</HEAD>
<BODY>
-----Forwarded Message-----<BR>
<B>From:</B> abigail &lt;[EMAIL PROTECTED]&gt;<BR>
<B>To:</B> [EMAIL PROTECTED]<BR>
<B>Subject:</B> Have Faith<BR>
<B>Date:</B> 22 Jul 2003 15:20:14 -0500<BR>
<BR>
<TABLE BGCOLOR="#ff2222" CELLSPACING="12" CELLPADDING="5" WIDTH="600" BORDER="2">
<TR>
<TD BGCOLOR="#ffffff" ALIGN="center">
<FONT SIZE="4"><B>A few moments of your time could save you thousands over the life of 
your loan! What are you waiting for? <BR>
</FONT><BR>
<A HREF="http://scotiaqq.com/4/index.asp?RefID=588897";><FONT SIZE="5"><U>Visit 
Now</U></B></FONT></A>
</TD>
</TR>
</TABLE>
<BR>
<A HREF="http://scotiaqq.com/auto/index.htm";><FONT COLOR="#0000ee"><U>click here to 
unsubscribe</U></A>.</FONT> bqbYy9TYXRQqj<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<PRE>-- 
william f guyton jr
senior network engineer
informs
334.277.0372x133</PRE>
</TD>
</TR>
</TABLE>

</BODY>
</HTML>

--=-v5uCA++Kl/K1aevYim8H--


--_===660824====rico.org===_--

>From [EMAIL PROTECTED] Wed Jul 23 23:36:38 2003
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 17719 invoked from network); 23 Jul 2003 23:36:38 -0000
Received: from gateway4.eamc.org (HELO rico.org) (65.83.121.228) by
        192.168.1.2 with SMTP; 23 Jul 2003 23:36:38 -0000
Received: from [66.80.168.124] (account <[EMAIL PROTECTED]>) by rico.org
        (CommuniGate Pro WebUser 4.0.6) with HTTP id 660812 for
        <[EMAIL PROTECTED]>; Thu, 24 Jul 2003 00:03:38 -0400
From: "Qmail" <[EMAIL PROTECTED]>
Subject: Fwd: [Fwd: Make lenders compete for your loan  Wguyton]
To: [EMAIL PROTECTED]
X-Mailer: CommuniGate Pro Web Mailer v.4.0.6
Date: Thu, 24 Jul 2003 00:03:38 -0400
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="_===660812====rico.org===_"
X-Evolution-Source: pop://[EMAIL PROTECTED]

This is a multi-part MIME message

--_===660812====rico.org===_
Content-Type: text/plain; charset="ISO-8859-1"; format="flowed"
Content-Transfer-Encoding: 8bit




   --- the forwarded message follows ---

--_===660812====rico.org===_
Content-Type: message/rfc822

Return-Path: <[EMAIL PROTECTED]>
Received: from bb.informs.com ([216.248.165.160] verified) by rico.org
        (CommuniGate Pro SMTP 4.0.6) with SMTP id 660805 for [EMAIL PROTECTED]; Wed,
        23 Jul 2003 19:30:54 -0400
Received: (qmail 30013 invoked from network); 23 Jul 2003 18:50:54 -0000
Received: from unknown (HELO qmail) (192.168.1.2) by bb.informs.com with
        SMTP; 23 Jul 2003 18:50:54 -0000
Subject: [Fwd: Make lenders compete for your loan  Wguyton]
From: william f guyton jr <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Content-Type: multipart/alternative; boundary="=-0zqj0FXq21EJckqYMAWH"
Organization: informs
Message-Id: <[EMAIL PROTECTED]>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.4.0 
Date: 23 Jul 2003 14:48:39 -0500

*This message was transferred with a trial version of CommuniGate(tm) Pro*

--=-0zqj0FXq21EJckqYMAWH
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

-----Forwarded Message-----
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Make lenders compete for your loan Wguyton
Date: 24 Jul 2003 03:11:57 +0000





 

If you would no longer like us to contact you, you may click here.

vet ols tjmw nqqlykuqq hbhi ruowdtfyo
-- 
william f guyton jr
senior network engineer
informs
334.277.0372x133

--=-0zqj0FXq21EJckqYMAWH
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
  <META NAME="GENERATOR" CONTENT="GtkHTML/3.0.5">
</HEAD>
<BODY>
-----Forwarded Message-----<BR>
<B>From:</B> [EMAIL PROTECTED]<BR>
<B>To:</B> [EMAIL PROTECTED]<BR>
<B>Subject:</B> Make lenders compete for your loan Wguyton<BR>
<B>Date:</B> 24 Jul 2003 03:11:57 +0000<BR>
<BR>
<BR>
<BR>
<A 
HREF="http://%77%77%77%2E%61%73%70%73%65%72%76%65%72%32%2E%6E%65%74/%4C%30%39/%66%72%65%65%71%75%6F%74%65%2E%61%73%70%78";><IMG
 SRC="http://pws.prserv.net/usinet.ba0427/m/1.gif"; WIDTH="587" HEIGHT="522" 
ALIGN="bottom" BORDER="0"></A><BR>
<BR>
&nbsp;<BR>
<BR>
<FONT SIZE="1">If you would no longer like us to contact you, you may </FONT><A 
HREF="http://%77%77%77%2E%63%68%65%61%70%62%6C%75%65%70%69%6C%6C%2E%63%6F%6D/%72%65/%72%65%6D%6F%76%65%2E%70%68%70";><FONT
 SIZE="1"><U>click here.</U></FONT></A><BR>
<BR>
vet ols tjmw nqqlykuqq hbhi ruowdtfyo<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<PRE>-- 
william f guyton jr
senior network engineer
informs
334.277.0372x133</PRE>
</TD>
</TR>
</TABLE>

</BODY>
</HTML>

--=-0zqj0FXq21EJckqYMAWH--


--_===660812====rico.org===_--

[SAtalk] Re: image only spam question/help (fwd)

Reply via email to