> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On 
> Behalf Of AltGrendel
> Sent: Thursday, December 18, 2003 7:54 AM
> To: SA-Talk
> Subject: RE: [SAtalk] importing spam from exchange users for sa-learn?

> 
> Wasn't there a big issue with public folders stripping off 
> the original email headers and replacing them with something else? 



It doesn't beat 'em up too badly.  Here's one I just pulled out of an
Exchange 2000 Public Folder.


---------------

Microsoft Mail Internet Headers Version 2.0
Received: from NAV.courts.state.tx.us ([10.mun.g.ed]) by
email.courts.state.tx.us with Microsoft SMTPSVC(5.0.2195.6713);
         Fri, 5 Dec 2003 01:42:22 -0600
Received: from relay-sa.courts.state.tx.us ([10.mun.ge.d2])
 by NAV.courts.state.tx.us (SAVSMTP 3.0.0.39) with SMTP id
M2003120501422119000
 for <[EMAIL PROTECTED]>; Fri, 05 Dec 2003
01:42:21 -0600
Received: by relay-sa.courts.state.tx.us (Postfix, from userid 500)
        id 546974A4FE; Fri,  5 Dec 2003 01:42:19 -0600 (CST)
Received: from 1.mail-out.ovh.net (1.mail-out.ovh.net [213.186.33.82])
        by relay-sa.courts.state.tx.us (Postfix) with ESMTP id
59C7E4A4FF
        for <[EMAIL PROTECTED]>; Fri,  5 Dec 2003
01:42:09 -0600 (CST)
Received: (qmail 3470 invoked by uid 503); 5 Dec 2003 04:31:36 -0000
Received: from b2.ovh.net (HELO 60gp.ovh.net) (213.186.33.52)
  by 1.mail-out.ovh.net with DES-CBC3-SHA encrypted SMTP; 5 Dec 2003
04:31:36 -0000
Received: by 60gp.ovh.net (Postfix, from userid 16757)
        id 71705262D2; Fri,  5 Dec 2003 05:31:57 +0100 (CET)
To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
Subject: * Probable SPAM * [SA-06.37] CRUISES TO PLEASURE - Closing
Party.....Modrophenia - Saturday 13th december 2003
Message-Id: <[EMAIL PROTECTED]>
Date: Fri,  5 Dec 2003 05:31:57 +0100 (CET)
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
RELAY-SA
X-Spam-Report: 
        *  0.2 NO_REAL_NAME From: does not include a real name
        *  1.7 NO_COST BODY: No such thing as a free lunch (3)
        *  2.7 SENT_IN_COMPLIANCE BODY: Claims compliance with spam
regulations
        * -1.5 BAYES_01 BODY: Bayesian spam probability is 1 to 10%
        *      [score: 0.0228]
        *  1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
        *      [Blocked - see
<http://www.spamcop.net/bl.shtml?213.186.33.52>]
        *  0.1 CLICK_BELOW Asks you to click below
        *  1.8 AWL AWL: Auto-whitelist adjustment
X-Spam-Status: Yes, hits=6.4 required=5.0
tests=AWL,BAYES_01,CLICK_BELOW,
        NO_COST,NO_REAL_NAME,RCVD_IN_BL_SPAMCOP_NET,SENT_IN_COMPLIANCE 
        autolearn=no version=2.60
X-Spam-Level: ******
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 05 Dec 2003 07:42:22.0093 (UTC)
FILETIME=[515E33D0:01C3BB03]

 


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to