OK, now what do we do about this.

The following spam came to me after having  been passed by mailfilter and 
spamassassin, 
It was correctly passed as I had set a Mailfilter ALLOW rule and a 
Spamassassin whitelist entry for Mailfilter-dev messages.

If I run this one through the spamassassin sa-learn utility, it will taint the 
Bayesian database. 

Do I now take the mailfilter lists off my list of ALLOW rules and my 
Spamassassin whitelist?

No big deal at the moment as it is only one message, but what happens when 
other spammers discover that this is a way to distribute their junk?


Clive
  

On Thursday 04 December 2003 01:38, Clay Marion wrote:
> Return-Path: <[EMAIL PROTECTED]>
> Received: from sc8-sf-mx2.sourceforge.net ([66.35.250.206])
>           by fep02-mail.bloor.is.net.cable.rogers.com
>           (InterMail vM.5.01.05.12 201-253-122-126-112-20020820) with ESMTP
>           id
> <[EMAIL PROTECTED]
>mx2.sourceforge.net> for <[EMAIL PROTECTED]>; Thu, 4 Dec 2003 01:40:59 -0500
> Received: from sc8-sf-list1-b.sourceforge.net ([10.3.1.7]
> helo=sc8-sf-list1.sourceforge.net) by sc8-sf-mx2.sourceforge.net with esmtp
> (TLSv1:AES256-SHA:256) (Exim 4.24)
>         id 1ARnBb-0008MX-Ht; Wed, 03 Dec 2003 22:42:03 -0800
> Received: from localhost.localdomain ([127.0.0.1]
> helo=projects.sourceforge.net) by sc8-sf-list1.sourceforge.net with esmtp
> (Exim 4.24)
>         id 1ARnBb-0003Wp-Be; Wed, 03 Dec 2003 22:42:03 -0800
> Received: from sc8-sf-list2-b.sourceforge.net ([10.3.1.8]
> helo=sc8-sf-list2.sourceforge.net) by sc8-sf-list1.sourceforge.net with
> esmtp (Exim 4.24)
>         id 1ARnBA-0003Ua-EB; Wed, 03 Dec 2003 22:41:36 -0800
> Received: from sc8-sf-mx1-b.sourceforge.net ([10.3.1.11]
> helo=sc8-sf-mx1.sourceforge.net) by sc8-sf-list2.sourceforge.net with esmtp
> (Exim 4.24)
>         id 1ARnBA-00021F-60; Wed, 03 Dec 2003 22:41:36 -0800
> Received: from externalmx.valinux.com ([198.186.202.147]
> helo=externalmx.vasoftware.com) by sc8-sf-mx1.sourceforge.net with esmtp
> (Exim 4.24)
>         id 1ARnB9-00076S-Pd; Wed, 03 Dec 2003 22:41:35 -0800
> Received: from ool-4354924f.dyn.optonline.net ([67.84.146.79]:3848)
>         by externalmx.vasoftware.com with smtp (Exim 4.24 #1 (Debian))
>         id 1ARnB0-0008F0-MX; Wed, 03 Dec 2003 22:41:30 -0800
> Received: from [113.40.42.202] by ool-4354924f.dyn.optonline.net with SMTP;
> Thu, 04 Dec 2003 09:38:58 +0300 Message-ID: <[EMAIL PROTECTED]>
> From: "Clay Marion" <[EMAIL PROTECTED]>
> Reply-To: "Clay Marion" <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Cc: <[EMAIL PROTECTED]>,
>  <[EMAIL PROTECTED]>
> X-Mailer: Microsoft Outlook Express 5.50.4522.1200
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
>   boundary="EAAB4BB3.1AEDF.24.B5077"
> X-Priority: 3
> X-Spam-Score: 5.1 (+++++)
> X-Spam-Report: Spam Filtering performed by sourceforge.net.
>         See http://spamassassin.org/tag/ for more details.
>         Report problems to
> https://sf.net/tracker/?func=add&group_id=1&atid=200001 0.9
> FROM_ENDS_IN_NUMS      From: ends in numbers
>         1.3 NO_OBLIGATION          BODY: There is no obligation
>         0.0 LINES_OF_YELLING       BODY: A WHOLE LINE OF YELLING DETECTED
>         0.9 BLANK_LINES_70_80      BODY: Message body has 70-80% blank
> lines 0.5 FORGED_YAHOO_RCVD      'From' yahoo.com does not match 'Received'
> headers 1.6 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS
> Outlook X-Spam-Flag: YES
> Subject: [Mailfilter-dev] AFTER-HOURS TRADING - Breaking News...gilead
> Sender: [EMAIL PROTECTED]
> Errors-To: [EMAIL PROTECTED]
> X-BeenThere: [EMAIL PROTECTED]
> X-Mailman-Version: 2.0.9-sf.net
> Precedence: bulk
> List-Unsubscribe:
> <https://lists.sourceforge.net/lists/listinfo/mailfilter-dev>,
> <mailto:[EMAIL PROTECTED]>
> List-Id: <mailfilter-dev.lists.sourceforge.net>
> List-Post: <mailto:[EMAIL PROTECTED]>
> List-Help:
> <mailto:[EMAIL PROTECTED]>
> List-Subscribe:
> <https://lists.sourceforge.net/lists/listinfo/mailfilter-dev>,
> <mailto:[EMAIL PROTECTED]>
> List-Archive:
> <http://sourceforge.net/mailarchive/forum.php?forum=mailfilter-dev>
> X-Original-Date: Thu, 04 Dec 2003 09:38:58 +0300
> Date: Thu, 04 Dec 2003 09:38:58 +0300
> X-Spam-Score: 4.2 (++++)
> X-Spam-Report: Spam Filtering performed by sourceforge.net.
>         See http://spamassassin.org/tag/ for more details.
>         Report problems to
> https://sf.net/tracker/?func=add&group_id=1&atid=200001 0.9
> FROM_ENDS_IN_NUMS      From: ends in numbers
>         1.3 NO_OBLIGATION          BODY: There is no obligation
>         0.0 LINES_OF_YELLING       BODY: A WHOLE LINE OF YELLING DETECTED
>         0.5 FORGED_YAHOO_RCVD      'From' yahoo.com does not match
> 'Received' headers 1.6 FORGED_MUA_OUTLOOK     Forged mail pretending to be
> from MS Outlook Status: R
> X-Status: N
> X-KMail-EncryptionState:  
> X-KMail-SignatureState:  
>
>
> AFTER-HOURS TRADING - BREAKING NEWS
>
> Get Quote - http://quote.money.cnn.com/quote/quote?symbols=htds
>
> Hard to Treat Diseases Incorporated - HTDS - Announces: Receipt of Tubercin
> Toxicity Study and Formation of Scientific Advisory Panel - Wednesday
> December 3, 8:04 pm ET
>
> DELRAY BEACH, Fla.--(BUSINESS WIRE)--Dec. 3, 2003--Hard to Treat Diseases
> Incorporated (Pink Sheets: HTDS) announces today that the spokesperson for
> the independent medical group conducting the testing for HTTD (HTDS) has
> forwarded the formal Testing Results of Tubercin®'s Toxicity Trials to
> HTTD.
>
> Tubercin of five different concentrations was administered to five groups
> of mice. A pathologist at the University of Oklahoma Health Science Center
> performed autopsies. The mice were randomized and only the control mouse
> was known to the pathologist, as stated in the cover letter of the
> Pathology Report.
>
> The report concludes, "All tissues evaluated, visceral organs and the brain
> were essentially normal in appearance." "The importance of this report is
> even better than I expected," stated the spokesperson for the medical
> group. "As the testing continues and if the results are similar to those of
> Chemotherapy and or radiation with no harmful side effects, Tubercin has
> enormous potential for the treatment of cancer and the immune system."
>
> The President and CEO of HTTD, Mr. Colm J. King is in the process of
> forming a Scientific Advisory Panel with leading Oncologists and
> Immunologists from prestigious institutions in the U.S. The panel will
> review the reports and results of Tubercin®'s findings and will report back
> to Mr. King with the ongoing reports in layman language for the
> shareholders.
>
> "We are continuing to receive promising results regarding Tubercin® and
> we're looking forward to additional positive results in the near future,"
> stated Mr. King. "These tests prove that Tubercin® is non-toxic and is the
> first step on the way to human clinical trials as well as the first
> positive breakthrough conducted in the United States with an independent
> medical group for Tubercin®.
>
> Operating out of Delray Beach, Florida, Hard to Treat Diseases Incorporated
> ("HTTD") holds the international marketing rights, except South Korea, to
> Tubercin®, a patented immunostimulant developed for combating Cancer under
> medical patent (US Patent 6,274,356). The unique properties unlike other
> cancer products are clearly stated in the abstract summary of the patent...
> "A carbohydrate complex, which is a mixture of low molecular-weight
> polysaccharides of an arabinomannan structure extracted from Mycobacterium
> tuberculosis, is highly effective in treating various cancer patients
> without incurring any adverse side effects."
>
>
>
>
>
>
> Statements in this press release that are not historical facts are
> forward-looking statements within the meaning of the Securities Act of
> 1933, as amended. Those statements include statements regarding the intent,
> belief or current expectations of the Company and its management. Such
> statements reflect management's current views, are based on certain
> assumptions and involve risks and uncertainties. Actual results, events, or
> performance may differ materially from the above forward-looking statements
> due to a number of important factors, and will be dependent upon a variety
> of factors, including, but not limited to, our ability to obtain additional
> financing and access funds from our existing financing arrangements that
> will allow us to continue our current and future operations and whether
> demand for our product and testing service in domestic and international
> markets will continue to expand. The Company undertakes no obligation to
> publicly update these forward-looking statements to reflect events or
> circumstances that occur after the date hereof or to reflect any change in
> the Company's expectations with regard to these forward-looking statements
> or the occurrence of unanticipated events.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> sstbnyiyb
> nud d kpennhdoso



-------------------------------------------------------
This SF.net email is sponsored by OSDN's Audience Survey.
Help shape OSDN's sites and tell us what you think. Take this
five minute survey and you could win a $250 Gift Certificate.
http://www.wrgsurveys.com/2003/osdntech03.php?site=8
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to