I receive a lot of
spams that have an empty body with attachments. They never seem to get tagged
what can I do to fix this? We are using SA 2.6 with bayes, big evil, backhair,
fvgt90, and some others.
Bellow are the
headers of one I just received.
Received: from ini-filter.interactivenw.com
([12.7.44.39]) by ini-mail.interactivenw.com with SMTP (Microsoft Exchange
Internet Mail Service Version 5.5.2653.13)
id DYGT899T; Tue, 27 Jan 2004 10:53:18 -0800
Received: from localhost (INI-FILTER [127.0.0.1])
by INI-FILTER.interactivenw.com (Postfix) with ESMTP id 78FE734F7D
for <[EMAIL PROTECTED]>; Tue, 27 Jan 2004 10:59:49 -0800 (PST)
Received: from INI-FILTER.interactivenw.com ([127.0.0.1])
by localhost (INI-FILTER.interactivenw.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 20732-05 for <[EMAIL PROTECTED]>;
Tue, 27 Jan 2004 10:59:49 -0800 (PST)
Received: from falcon.mail.pas.earthlink.net (falcon.mail.pas.earthlink.net [207.217.120.74])
by INI-FILTER.interactivenw.com (Postfix) with ESMTP id DAB6034F3C
for <[EMAIL PROTECTED]>; Tue, 27 Jan 2004 10:59:40 -0800 (PST)
Received: from user-38lcogb.dialup.mindspring.com ([209.86.98.11] helo=Pajgmbm)
by falcon.mail.pas.earthlink.net with smtp (Exim 3.33 #1)
id 1AlYMc-0007HG-00
for [EMAIL PROTECTED]; Tue, 27 Jan 2004 10:55:06 -0800
From: info <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Support them.
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=Te13Ow1D3egP3O70KpgU08A
Message-Id: <[EMAIL PROTECTED]>
Date: Tue, 27 Jan 2004 10:55:06 -0800
id DYGT899T; Tue, 27 Jan 2004 10:53:18 -0800
Received: from localhost (INI-FILTER [127.0.0.1])
by INI-FILTER.interactivenw.com (Postfix) with ESMTP id 78FE734F7D
for <[EMAIL PROTECTED]>; Tue, 27 Jan 2004 10:59:49 -0800 (PST)
Received: from INI-FILTER.interactivenw.com ([127.0.0.1])
by localhost (INI-FILTER.interactivenw.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 20732-05 for <[EMAIL PROTECTED]>;
Tue, 27 Jan 2004 10:59:49 -0800 (PST)
Received: from falcon.mail.pas.earthlink.net (falcon.mail.pas.earthlink.net [207.217.120.74])
by INI-FILTER.interactivenw.com (Postfix) with ESMTP id DAB6034F3C
for <[EMAIL PROTECTED]>; Tue, 27 Jan 2004 10:59:40 -0800 (PST)
Received: from user-38lcogb.dialup.mindspring.com ([209.86.98.11] helo=Pajgmbm)
by falcon.mail.pas.earthlink.net with smtp (Exim 3.33 #1)
id 1AlYMc-0007HG-00
for [EMAIL PROTECTED]; Tue, 27 Jan 2004 10:55:06 -0800
From: info <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Support them.
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=Te13Ow1D3egP3O70KpgU08A
Message-Id: <[EMAIL PROTECTED]>
Date: Tue, 27 Jan 2004 10:55:06 -0800
--Te13Ow1D3egP3O70KpgU08A
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
--Te13Ow1D3egP3O70KpgU08A
Content-Type: audio/x-wav;
name=page.pif
Content-Transfer-Encoding: base64
Content-ID: <Q0QG825r8V587U5>
Content-Type: audio/x-wav;
name=page.pif
Content-Transfer-Encoding: base64
Content-ID: <Q0QG825r8V587U5>
--Te13Ow1D3egP3O70KpgU08A
--Te13Ow1D3egP3O70KpgU08A
Content-Type: application/octet-stream;
name=com[1].htm
Content-Transfer-Encoding: base64
Content-ID: <Q0QG825r8V587U5>
Content-Type: application/octet-stream;
name=com[1].htm
Content-Transfer-Encoding: base64
Content-ID: <Q0QG825r8V587U5>
--Te13Ow1D3egP3O70KpgU08A--
