On Friday 22 April 2005 04:49 am, Matthew Newton wrote: > Hi, > > Have had several spams over the last few days with the exact paragraph > below. Anyone else seen similar messages? Any rules available? > It's tagged quite easily here. Didn't include the entire paragraph, but its the same.
Subject: *****SPAM(21.3)***** Re: Odrer and svae X-Spam-Prev-Subject: Re: Odrer and svae X-Spam-DCC: CollegeOfNewCaledonia cpollock.localdomain 1189; Body=1 Fuz1=many Fuz2=many X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on cpollock.localdomain X-Spam-Level: ********************* X-Spam-Status: Yes, score=21.3 required=5.0 tests=BAYES_99,DCC_CHECK, DIGEST_MULTIPLE,DNS_FROM_RFC_POST,HELO_DYNAMIC_IPADDR,HTML_FONT_BIG, HTML_MESSAGE,HTML_TAG_EXIST_TBODY,HTML_TEXT_AFTER_BODY, HTML_TEXT_AFTER_HTML,MSGID_FROM_MTA_ID,PYZOR_CHECK, RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_XBL,URIBL_SBL autolearn=disabled version=3.0.2 X-Spam-Pyzor: Reported 2 times. X-Spam-Report: * 4.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr 1) * 1.7 MSGID_FROM_MTA_ID Message-Id for external message added locally * 0.0 HTML_TEXT_AFTER_HTML BODY: HTML contains text after HTML close tag * 0.1 HTML_TEXT_AFTER_BODY BODY: HTML contains text after BODY close tag * 0.0 HTML_MESSAGE BODY: HTML included in message * 0.1 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag * 0.1 HTML_FONT_BIG BODY: HTML tag for a big font size * 0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50% * [cf: 100] * 1.9 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 1.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) * 3.5 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/) * 2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/) * 3.1 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL * [67.188.170.83 listed in sbl-xbl.spamhaus.org] * 1.6 DNS_FROM_RFC_POST RBL: Envelope sender in postmaster.rfc-ignorant.org * 1.0 URIBL_SBL Contains an URL listed in the SBL blocklist * [URIs: d3w.net] * 0.1 DIGEST_MULTIPLE Message hits more than one network digest check X-UID: 8572 X-Length: 7646 Hello, When parents talk to babies, they often speak slowly and melodically, using a form -- Chris Registered Linux User 283774 http://counter.li.org 21:54:28 up 13 days, 1 min, 1 user, load average: 0.48, 0.65, 0.55 Mandriva Linux 10.1 Official, kernel 2.6.8.1-12mdk ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Beauty? What's that? -- Larry Wall in <[EMAIL PROTECTED]> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
