Hi,
Could someone please remove the subscriber, which constantly sends messages
the the one below back to the list ??
The subscriber seesm to be [EMAIL PROTECTED] - I've contacted the person
before, because I'm tired of seeing these rejected mails from his system
being posted back to the list, but aparently the problem hasn't been
solved...
Regards,
/Brian
-----Original Message-----
From: Vicki Brown [mailto:[EMAIL PROTECTED]
Sent: 17. marts 2005 02:04
To: users@spamassassin.apache.org
Subject: ****SPAM(7.2)**** rule didn't fire
SpamAssassin, running on "mail.dailyhills.com", has identified this incoming
email as possible spam. The original message has been attached to this
email so you can view it (if it isn't spam).
If you have any questions, contact [EMAIL PROTECTED] for details.
Content preview: Ok. What totally minless dumb thing did I do that I
just can't see? This rule is in my /etc/mail/spamassassin/local.cf
body CF_BAD_URL4 /www\.(vdrugz|gh6)\.net/i score CF_BAD_URL4 10.0
describe CF_BAD_URL4 .net Junk site [...]
Content analysis details: (7.2 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
[cf: 100]
-2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
[score: 0.0001]
2.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.0 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: gh6.net]
0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: gh6.net]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: gh6.net]
3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: gh6.net]
4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: gh6.net]
-5.5 AWL AWL: From: address is in the auto white-list
---- ----------------------
--------------------------------------------------
--- Begin Message ---
Ok. What totally minless dumb thing did I do that I just can't see?
This rule is in my /etc/mail/spamassassin/local.cf
body CF_BAD_URL4 /www\.(vdrugz|gh6)\.net/i
score CF_BAD_URL4 10.0
describe CF_BAD_URL4 .net Junk site
I received a piece of mail containing the string
http://www.gh6.net/
Yet the rule did not fire
>Subject: Prescription Drugs
>Date: Thu, 17 Mar 2005 07:39:25 +0700
>X-Priority: 3
>X-Spam-Flag: YES
>X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on cfcl.com
>X-Spam-Level: ***
>X-Spam-Status: Yes, score=3.0 required=0.5 tests=FORGED_RCVD_HELO
> autolearn=no version=3.0.2
>
>Online pharmacy - Visit our online store and save.
>
>Save up to 80% compared to normal rates.
>
>All popular drugs are available!
>
>- World wide shipping
>- No Doctor Visits
>- No Prescriptions
>- Next Day Priority Shipping
>- Discreet Packaging
>- Buy in Bulk and Save!
>
>We make it easier and faster than ever to get the prescriptions you
>need.
>
>Go here: http://www.gh6.net/
--
Vicki Brown ZZZ
Journeyman Sourceror: zz |\ _,,,---,,_ Code, Docs, Process,
Scripts & Philtres zz /,`.-'`' -. ;-;;,_ Perl, WWW, Mac OS X
http://cfcl.com/vlb |,4- ) )-,_. ,\ ( `'-' SF Bay Area, CA USA
_______________________ '---''(_/--' `-'\_) ___________________________
--- End Message ---
