I believe it was too big for SA to scan. But if it did, there are some spam signs below.
> -----Original Message----- > From: Jeff Funk [mailto:[EMAIL PROTECTED] > Sent: Thursday, September 18, 2003 1:48 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Any ideas???? > > > Microsoft Mail Internet Headers Version 2.0 > Received: from bandoog.com ([209.83.8.50]) by mail.farin.com > with Microsoft SMTPSVC(5.0.2195.5329); > Thu, 18 Sep 2003 00:40:43 -0500 > Received: from [218.75.22.22] (HELO 209.83.8.50) > by bandoog.com (CommuniGate Pro SMTP 4.1.3) > with SMTP id 1325526 for [EMAIL PROTECTED]; Thu, 18 Sep 2003 > 00:41:08 -0500 > Received: from [66.254.7.10] by 209.83.8.50 with ESMTP id I always wondered why SA didn't have an eval to see that the IPs didn't match. We humans can see the obvious header pattern of this spam. But telling SA to see it is another thing. > <247056-92322>; Thu, 18 Sep 2003 17:31:45 -0200 > Message-ID: <[EMAIL PROTECTED]> I believe that this message-id is incorrect for Outlook express. It should contain more then it does. Correct? > From: "Carlos Wilkes" <[EMAIL PROTECTED]> > Reply-To: "Carlos Wilkes" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Subject: Get_Diazepam_-_No_Prescription_Needed_-_chuck > Date: Thu, 18 Sep 03 17:31:45 GMT > X-Mailer: Microsoft Outlook Express 5.50.4522.1200 > MIME-Version: 1.0 > Content-Type: multipart/related; > type="multipart/alternative"; > boundary="0.88.2C._5F0" > X-Priority: 1 > X-MSMail-Priority: High > Return-Path: [EMAIL PROTECTED] > X-OriginalArrivalTime: 18 Sep 2003 05:40:43.0603 (UTC) > FILETIME=[66E88230:01C37DA7] > Is FILETIME a legit header or utter BS? Chris Santerre System Admin and SA Custom Rules Emporium keeper http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm "A little nonsense now and then, is relished by the wisest men." - Willy Wonka ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
