Thanks for the quick response...

I'll be glad to help in any way I can.

Sorry for top-posting...  Outlook doesn't thread very well for comments
nested in previous messages. (Or I haven't figured out how to..  :)

The sa-learn restore was done with the same override user name as the
production username was set to read from (the username was not set
during the --backup on the prod server).

P.S. SA3.02 running on Exchange 2000.  As posted previously, the
DBM_File version of bayes works fine.

-----Original Message-----
From: Michael Parker [mailto:[EMAIL PROTECTED] 
Sent: Friday, May 13, 2005 8:57 AM
To: Steven Manross
Cc: users@spamassassin.apache.org
Subject: Re: SQL Question


On Fri, May 13, 2005 at 08:35:08AM -0700, Steven Manross wrote:
> On that same note,
> 
> I was playing around with BAYES on a MS SQL Server...
> (I followed the directions in the readme files and tweaked the
mysql.sql
> code to work for MS SQL in creation of the tables.)

Ahhh, most excellent, I don't know of anyone running on MS SQL
Server.  I'm glad to hear that you got pretty far.  If you've got a
.sql file that seems to work (once we debug your current problem of
course) we should get it added to the source tree.

> 
> The import worked fine (no errors that I could see).
> 
> sa-learn --D --backup >bayes-backup.txt)

It may not be wise to run with -D when backing up, it might be a
little verbose to be useful.  Can you cut-and-paste the first 10 or so
lines of this file?  That will give an indication if they look ok.

> Mod the CF files
> 
> sa-learn -D --restore bayes-backup.txt)
> 

Might also be helpful, once you've got a decent bayes db, so goahead
and do a --backup on this one and make sure everything looks sane.  If
you do, go ahead and cut-and-paste the first 10 or so lines as well.

> But no bayes tests seem to hit since modifying the local.cf for the
new
> bayes store..
> 
> I can see the SQL traffic hitting the database, but nothing seems to
be
> hitting BAYES_** at all.
> 
> Any ideas?
> 

It's possible that you just aren't hitting enough significant tokens,
but unlikely depending on your database size.  One quick question,
what username did you run sa-learn as?  Are you sure that the entries
in bayes_vars are under the username that you have specified in the
bayes_sql_override_username option?

Run a msg through with spamassassin -D and paste the debug output, it
might give us an indication.

Also, any other tips, possible changes to README.bayes, you can
provide for running under MS SQL Server would be great, I'll see about
getting those folded into the source tree.

Michael
C:\Perl\bin>spamassassin -D 
<\\xxxxxxxx\xxxx\spamsink\messages\1\1116001165.39775
2-before.txt >c:\sa-debug.txt
debug: SpamAssassin version 3.0.2
debug: Score set 0 chosen.
debug: running in taint mode? no
debug: defining getpwuid() wrapper using 'unknown' as username
debug: using "C:\Perl\site\etc\mail\spamassassin\init.pre" for site rules init.p
re
debug: config: read file C:\Perl\site\etc\mail\spamassassin\init.pre
debug: using "C:\Perl\site/share/spamassassin" for default rules dir
debug: config: read file C:\Perl\site/share/spamassassin/10_misc.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_anti_ratware.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_body_tests.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_compensate.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_dnsbl_tests.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_drugs.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_fake_helo_tests.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_head_tests.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_html_tests.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_meta_tests.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_phrases.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_porn.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_ratware.cf
debug: config: read file C:\Perl\site/share/spamassassin/20_uri_tests.cf
debug: config: read file C:\Perl\site/share/spamassassin/23_bayes.cf
debug: config: read file C:\Perl\site/share/spamassassin/25_body_tests_es.cf
debug: config: read file C:\Perl\site/share/spamassassin/25_hashcash.cf
debug: config: read file C:\Perl\site/share/spamassassin/25_spf.cf
debug: config: read file C:\Perl\site/share/spamassassin/25_uribl.cf
debug: config: read file C:\Perl\site/share/spamassassin/30_text_de.cf
debug: config: read file C:\Perl\site/share/spamassassin/30_text_fr.cf
debug: config: read file C:\Perl\site/share/spamassassin/30_text_nl.cf
debug: config: read file C:\Perl\site/share/spamassassin/30_text_pl.cf
debug: config: read file C:\Perl\site/share/spamassassin/50_scores.cf
debug: config: read file C:\Perl\site/share/spamassassin/60_whitelist.cf
debug: using "C:\Perl\site/etc/mail/spamassassin" for site rules dir
debug: config: read file C:\Perl\site/etc/mail/spamassassin/local.cf
debug: using "C:\Documents and Settings\xxxxxxxx/.spamassassin" for user state d
ir
debug: using "C:\Documents and Settings\xxxxxxxx/.spamassassin/user_prefs" for u
ser prefs file
debug: config: read file C:\Documents and Settings\xxxxxxxx/.spamassassin/user_p
refs
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x1d49b48)
debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH(0x26863f0)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x268c6ac)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x1d49b48) implements '
parse_config'
debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0x26863f0) implements '
parse_config'
debug: bayes: Using username: xxxxxxxx
debug: bayes: Database connection established
debug: bayes: found bayes db version 3
debug: bayes: Using userid: 2
debug: Score set 3 chosen.
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: trying (3) motorola.com...
debug: looking up NS for 'motorola.com'
debug: NS lookup of motorola.com succeeded => Dns available (set dns_available t
o hardcode)
debug: is DNS available? 1
debug: looking up PTR record for '24.9.250.9'
debug: PTR for '24.9.250.9': 'c-24-9-250-9.hsd1.co.comcast.net'
debug: received-header: parsed as [ ip=24.9.250.9 rdns=c-24-9-250-9.hsd1.co.comc
ast.net helo=c-24-9-250-9.hsd1.co.comcast.net by=xxxxxxxxx.somedomain.net 
ident= en
vfrom= intl=0 id= auth= ]
debug: received-header: parsed as [ ip=209.247.32.235 rdns=mail.Katewwdb.com hel
o=Katewwdb.com by=c-24-9-250-9.hsd1.co.comcast.net ident= envfrom= intl=0 id=619
1F2862C auth= ]
debug: looking up A records for 'xxxxxxxxx.somedomain.net'
debug: A records for 'xxxxxxxxx.somedomain.net': 192.168.1.8 192.168.1.7 
192.168.1.
6
debug: looking up A records for 'xxxxxxxxx.somedomain.net'
debug: A records for 'xxxxxxxxx.somedomain.net': 192.168.1.8 192.168.1.7 
192.168.1.
6
debug: received-header: 'by' xxxxxxxxx.somedomain.net has reserved IP 
192.168.1.8
debug: received-header: 'by' xxxxxxxxx.somedomain.net has reserved IP 
192.168.1.7
debug: received-header: 'by' xxxxxxxxx.somedomain.net has reserved IP 
192.168.1.6
debug: received-header: 'by' xxxxxxxxx.somedomain.net has no public IPs
debug: received-header: relay 24.9.250.9 trusted? yes internal? no
debug: looking up A records for 'c-24-9-250-9.hsd1.co.comcast.net'
debug: A records for 'c-24-9-250-9.hsd1.co.comcast.net': 24.9.250.9
debug: received-header: 'by' c-24-9-250-9.hsd1.co.comcast.net has public IP 24.9
.250.9
debug: received-header: relay 209.247.32.235 trusted? no internal? no
debug: metadata: X-Spam-Relays-Trusted: [ ip=24.9.250.9 rdns=c-24-9-250-9.hsd1.c
o.comcast.net helo=c-24-9-250-9.hsd1.co.comcast.net by=xxxxxxxxx.somedomain.net 
ide
nt= envfrom= intl=0 id= auth= ]
debug: metadata: X-Spam-Relays-Untrusted: [ ip=209.247.32.235 rdns=mail.Katewwdb
.com helo=Katewwdb.com by=c-24-9-250-9.hsd1.co.comcast.net ident= envfrom= intl=
0 id=6191F2862C auth= ]
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x1d49b48) implements '
parsed_metadata'
debug: ---- MIME PARSER START ----
debug: main message type: multipart/alternative
debug: parsing multipart, got boundary: ----=_NextPart_000_0004_2B609895.27CB23F
C
debug: found part of type text/plain, boundary: ----=_NextPart_000_0004_2B609895
.27CB23FC
debug: parsing normal part
debug: added part, type: text/plain
debug: found part of type text/html, boundary: ----=_NextPart_000_0004_2B609895.
27CB23FC
debug: parsing normal part
debug: added part, type: text/html
debug: ---- MIME PARSER END ----
debug: decoding: other encoding type (8bit), ignoring
debug: decoding: quoted-printable
debug: uri found: http://bestprce.fetialcgchl.com/?U7WZW1pN6Z_xEcofhgjkf
debug: uri found: http://bestprce.fetialcgchl.com/hfgjkdf?uJw30DvTIzB7KO.ghfjk
debug: URIDNSBL: domains to query: fetialcgchl.com
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: Return-Path header found after 1 or more Received lines, cannot trust env
elope-from
debug: all '*From' addrs: [EMAIL PROTECTED]
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: registering glue method for check_hashcash_double_spend (Mail::SpamAssass
in::Plugin::Hashcash=HASH(0x26863f0))
debug: registering glue method for check_for_spf_helo_pass (Mail::SpamAssassin::
Plugin::SPF=HASH(0x268c6ac))
debug: SPF: checking HELO (helo=Katewwdb.com, ip=209.247.32.235)
debug: SPF: trimmed HELO down to 'Katewwdb.com'
debug: SPF: query for /209.247.32.235/Katewwdb.com: result: none, comment: SPF:
domain of sender Katewwdb.com does not designate mailers
debug: registering glue method for check_hashcash_value (Mail::SpamAssassin::Plu
gin::Hashcash=HASH(0x26863f0))
debug: all '*To' addrs: [EMAIL PROTECTED]
debug: registering glue method for check_for_spf_softfail (Mail::SpamAssassin::P
lugin::SPF=HASH(0x268c6ac))
debug: SPF: relayed through one or more trusted relays, cannot use header-based
Envelope-From, skipping
debug: registering glue method for check_for_spf_pass (Mail::SpamAssassin::Plugi
n::SPF=HASH(0x268c6ac))
debug: registering glue method for check_for_spf_helo_softfail (Mail::SpamAssass
in::Plugin::SPF=HASH(0x268c6ac))
debug: forged-HELO: from=katewwdb.com helo=katewwdb.com by=comcast.net
debug: registering glue method for check_for_spf_fail (Mail::SpamAssassin::Plugi
n::SPF=HASH(0x268c6ac))
debug: registering glue method for check_for_spf_helo_fail (Mail::SpamAssassin::
Plugin::SPF=HASH(0x268c6ac))
debug: running body-text per-line regexp tests; score so far=0.368
debug: running uri tests; score so far=0.368
debug: registering glue method for check_uridnsbl (Mail::SpamAssassin::Plugin::U
RIDNSBL=HASH(0x1d49b48))
debug: bayes corpus size: nspam = 43577, nham = 21141
debug: tokenize: header tokens for thread-index = " AcVX14YeJsQQ+OTdSKq7hk6jPBoz
Tw=="
debug: tokenize: header tokens for *M = "  OEA0110 OEBbe97 OEC0f5ed28c Katewwdb
com "
debug: tokenize: header tokens for Content-Transfer-Encoding = " 7bit"
debug: tokenize: header tokens for *F = "U*Alfonso D*Katewwdb.com D*com"
debug: tokenize: header tokens for To = "U*xxxxxx D*somedomain.net D*net"
debug: tokenize: header tokens for Importance = " normal"
debug: tokenize: header tokens for Priority = " normal"
debug: tokenize: header tokens for MIME-Version = " "
debug: tokenize: header tokens for *c = " multipart/alternative;   ----=_ NHxtPH
rt _ HHH _ HHHH _ HHHHHHHH . HHHHHHHH"
debug: tokenize: header tokens for X-Priority = " 3"
debug: tokenize: header tokens for X-MSMail-Priority = " Normal"
debug: tokenize: header tokens for *x = " Microsoft Outlook Express 6.00.2800.14
37"
debug: tokenize: header tokens for X-MimeOLE = " Produced By Microsoft MimeOLE V
6.00.2800.1478"
debug: tokenize: header tokens for *p = "U*Alfonso D*Katewwdb.com D*com"
debug: tokenize: header tokens for *RT = " [ ip=24.9.250.9 rdns=c-24-9-250-9.hsd
1.co.comcast.net helo=c-24-9-250-9.hsd1.co.comcast.net 
by=xxxxxxxxx.somedomain.net
ident= envfrom= intl=0 id= auth= ]"
debug: tokenize: header tokens for *RU = " [ ip=209.247.32.235 rdns=mail.Katewwd
b.com helo=Katewwdb.com by=c-24-9-250-9.hsd1.co.comcast.net ident= envfrom= intl
=0 id=6191F2862C auth= ]"
debug: tokenize: header tokens for *r = "   Katewwdb.com (mail.Katewwdb.com [209
.247.32 ip*209.247.32.235 ]) by c-24-9-250-9.hsd1.co.comcast.net   esmtp     <st
[EMAIL PROTECTED]>; "
debug: tokenize: header tokens for *r = "   Katewwdb.com (mail.Katewwdb.com [209
.247.32 ip*209.247.32.235 ]) by c-24-9-250-9.hsd1.co.comcast.net   esmtp     <st
[EMAIL PROTECTED]>;     c-24-9-250-9.hsd1.co.comcast.net ([24.9.250 
ip*24.9.250.9
 ]) by xxxxxxxxx.somedomain.net   Microsoft SMTPSVC(5.0.2195.6713); "
debug: bayes: tok_get_all: Token Count: 302
debug: bayes: tok_get_all: SQL Error: [Microsoft][ODBC SQL Server Driver][SQL Se
rver]'RPAD' is not a recognized function name. (SQL-42000)
[Microsoft][ODBC SQL Server Driver][SQL Server]Statement(s) could not be prepare
d. (SQL-42000)(DBD: st_execute/SQLExecute err=-1)
debug: cannot use bayes on this message; none of the tokens were found in the da
tabase
debug: bayes: not scoring message, returning undef
debug: madiff: left: 3, orig: 175, max-difference: 1.71%
debug: Razor2 is not available
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x1d49b48) implements '
check_tick'
debug: URIDNSBL: domain "fetialcgchl.com" listed (URIBL_OB_SURBL): 127.0.0.82
debug: URIDNSBL: domain "fetialcgchl.com" listed (URIBL_SC_SURBL): 127.0.0.82
debug: URIDNSBL: query for fetialcgchl.com took 2 seconds to look up (multi.surb
l.org.:fetialcgchl.com)
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Fri May 13 10:01:51 2005
debug: running raw-body-text per-line regexp tests; score so far=0.369
debug: running full-text regexp tests; score so far=0.369
debug: Razor2 is not available
debug: Current PATH is: C:\Perl\bin\;C:\Program Files\Support Tools\;C:\WINNT\sy
stem32;C:\WINNT;C:\WINNT\system32\WBEM;C:\WINNT\system32;C:\WINNT;C:\WINNT\Syste
m32\Wbem;C:\Program Files\Executive Software\Diskeeper\;C:\Program Files\Microso
ft SQL Server\80\Tools\BINN;C:\Program Files\Microsoft Visual Studio\Common\MSDe
v98\Bin;C:\Program Files\Microsoft Visual Studio\Common\Tools;C:\Program Files\M
icrosoft Visual Studio\VC98\bin
debug: Pyzor is not available: pyzor not found
debug: DCCifd is not available: no r/w dccifd socket found.
debug: DCC is not available: no executable dccproc found.
debug: Running tests for priority: 500
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Fri May 13 10:01:51 2005
debug: RBL: success for 11 of 11 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x1d49b48) implements '
check_post_dnsbl'
debug: URIDNSBL: domain "fetialcgchl.com" listed (URIBL_SBL): "http://www.spamha
us.org/SBL/sbl.lasso?query=SBL26967"
debug: URIDNSBL: query for fetialcgchl.com took 2 seconds to look up (sbl.spamha
us.org.:131.42.78.82)
debug: URIDNSBL: domain "fetialcgchl.com" listed (URIBL_SBL): "http://www.spamha
us.org/SBL/sbl.lasso?query=SBL23549"
debug: URIDNSBL: domain "fetialcgchl.com" listed (URIBL_SBL): "http://www.spamha
us.org/SBL/sbl.lasso?query=SBL25815"
debug: URIDNSBL: query for fetialcgchl.com took 2 seconds to look up (sbl.spamha
us.org.:241.112.7.218)
debug: URIDNSBL: queries completed: 2 started: 0
debug: URIDNSBL: queries active:  at Fri May 13 10:01:51 2005
debug: running meta tests; score so far=14.721
debug: running header regexp tests; score so far=14.721
debug: running body-text per-line regexp tests; score so far=14.721
debug: running uri tests; score so far=14.721
debug: running raw-body-text per-line regexp tests; score so far=14.721
debug: running full-text regexp tests; score so far=14.721
debug: Running tests for priority: 1000
debug: running meta tests; score so far=14.721
debug: running header regexp tests; score so far=14.721
debug: using "C:\Documents and Settings\xxxxxxxx/.spamassassin" for user state d
ir
debug: lock: 7756 trying to get lock on C:\Documents and Settings\xxxxxxxx/.spam
assassin/auto-whitelist with 0 retries
debug: lock: 7756 link to C:\Documents and Settings\xxxxxxxx/.spamassassin/auto-
whitelist.lock: sysopen ok
debug: Tie-ing to DB file R/W in C:\Documents and Settings\xxxxxxxx/.spamassassi
n/auto-whitelist
debug: auto-whitelist (db-based): [EMAIL PROTECTED]|ip=209.247 scores 3/43.16
7
debug: AWL active, pre-score: 14.721, autolearn score: 14.721, mean: 14.389, IP:
 209.247.32.235
debug: add_score: New count: 4, new totscore: 57.888
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.
debug: unlock: 7756 unlink C:\Documents and Settings\xxxxxxxx/.spamassassin/auto
-whitelist.lock
debug: Post AWL score: 14.555
debug: running body-text per-line regexp tests; score so far=14.555
debug: running uri tests; score so far=14.555
debug: running raw-body-text per-line regexp tests; score so far=14.555
debug: running full-text regexp tests; score so far=14.555
debug: auto-learn: currently using scoreset 3, recomputing score based on scores
et 1.
debug: auto-learn: message score: 14.555, computed score for autolearn: 11.937
debug: auto-learn? ham=0.1, spam=12, body-points=11.08, head-points=5.414, learn
ed-points=0
debug: auto-learn? no: inside auto-learn thresholds, not considered ham or spam
debug: is spam? score=14.555 required=5
debug: tests=AWL,HTML_MESSAGE,PLING_QUERY,RCVD_IN_DSBL,RCVD_IN_NJABL_DUL,RCVD_IN
_SORBS_DUL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL
debug: subtests=__ANY_OUTLOOK_MUA,__CT,__CTE,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIP
ART_ALT,__HAS_MIMEOLE,__HAS_MSGID,__HAS_MSMAIL_PRI,__HAS_OUTLOOK_IN_MAILER,__HAS
_SUBJECT,__HAS_X_MAILER,__HAS_X_PRIORITY,__MIME_HTML,__MIME_QP,__MIME_VERSION,__
MSGID_OK_HEX,__MSGID_OK_HOST,__NEXTPART_ALL,__NEXTPART_NORMAL,__OE_MSGID_2,__OE_
MUA,__OUTLOOK_DOLLARS_MSGID,__SANE_MSGID,__TAG_EXISTS_BODY,__TAG_EXISTS_CENTER,_
_TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META



-----  message follows-----



Received: from localhost by xxx.somedomain.net
        with SpamAssassin (version 3.0.2);
        Fri, 13 May 2005 10:01:51 -0700
From: "Namibian E. Cybernetics" <[EMAIL PROTECTED]>
To: "xxxxxx" <[EMAIL PROTECTED]>
Subject: =?Windows-1252?Q?Can=92t_draw_a_straight_line=3F_Wlel...now_you_can!_?=
Date: Fri, 13 May 2005 09:19:16 -0700
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on xxx.somedomain.net
X-Spam-Level: **************
X-Spam-Status: Yes, score=14.6 required=5.0 tests=AWL,HTML_MESSAGE,
        PLING_QUERY,RCVD_IN_DSBL,RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,
        URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL autolearn=no version=3.0.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4284DD7F.395E0000"

This is a multi-part message in MIME format.

------------=_4284DD7F.395E0000
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "xxx.somedomain.net", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
[EMAIL PROTECTED] for details.

Content preview:  Good day! This email was sent to you by your friend
  from our software stock shop. Your friend's message: Yesterday I found
  great software stock eshop while I was looking for Office XP. Really
  cheap prices and great offers everyday. Fellow, look here, isn't it a
  great offer? :) I Saved upto 80%! I've copied some prices, look below:
  [...] 

Content analysis details:   (14.6 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.4 PLING_QUERY            Subject has exclamation mark and question mark
 0.0 HTML_MESSAGE           BODY: HTML included in message
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [24.9.250.9 listed in dnsbl.sorbs.net]
 3.8 RCVD_IN_DSBL           RBL: Received via a relay in list.dsbl.org
                            [<http://dsbl.org/listing?24.9.250.9>]
 0.1 RCVD_IN_NJABL_DUL      RBL: NJABL: dialup sender did non-local SMTP
                            [24.9.250.9 listed in combined.njabl.org]
 1.0 URIBL_SBL              Contains an URL listed in the SBL blocklist
                            [URIs: fetialcgchl.com]
 3.2 URIBL_OB_SURBL         Contains an URL listed in the OB SURBL blocklist
                            [URIs: fetialcgchl.com]
 4.3 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL blocklist
                            [URIs: fetialcgchl.com]
-0.2 AWL                    AWL: From: address is in the auto white-list

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_4284DD7F.395E0000
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

thread-index: AcVX14YeJsQQ+OTdSKq7hk6jPBozTw==
Received: from c-24-9-250-9.hsd1.co.comcast.net ([24.9.250.9]) by 
xxxxxxxxx.somedomain.net with Microsoft SMTPSVC(5.0.2195.6713); Fri, 13 May 
2005 09:19:19 -0700
Received: from Katewwdb.com (mail.Katewwdb.com [209.247.32.235]) by 
c-24-9-250-9.hsd1.co.comcast.net with esmtp id 6191F2862C for <[EMAIL 
PROTECTED]>; Fri, 13 May 2005 09:19:16 -0700
Message-ID: <[EMAIL PROTECTED]>
Content-Transfer-Encoding: 7bit
From: "Namibian E. Cybernetics" <[EMAIL PROTECTED]>
To: "xxxxxx" <[EMAIL PROTECTED]>
Subject: =?Windows-1252?Q?Can=92t_draw_a_straight_line=3F_Wlel...now_you_can!_?=
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
Date: Fri, 13 May 2005 09:19:16 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0004_2B609895.27CB23FC"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478
X-Virus-Scanned: Norton
Return-Path: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 13 May 2005 16:19:21.0852 (UTC) 
FILETIME=[85748BC0:01C557D7]

This is a multi-part message in MIME format.

------=_NextPart_000_0004_2B609895.27CB23FC
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: 8bit

Good day!
This email was sent to you by your friend from our software stock shop.

Your friend's message:

Yesterday I found great software stock eshop while I was looking for Office XP.
Really cheap prices and great offers everyday.
Fellow, look here, isn't it a great offer? :)
I Saved upto 80%!
I've copied some prices, look below:

Windows XP Professional + Office XP Professional for as low as $89.95  
Adobe Photoshop 7 + Adobe Premiere 7 + Adobe Illustrator 10 for as low as  
$129.95  
Macromedia Dreamwaver MX 2004 + Flash MX 2004 for as low as  $109.95  
MS Money 2004 for as low as  $69.95  
Corel Draw Graphics Suite 11 for as low as  $59.95  
MS Encarta Encyclopedia Delux 2004 (3CD) for as low as  $89.95  
MS Visual Studio .NET Architect Edition (8CD) for as low as  $139.95  
Adobe PageMaker 7 (2CD) for as low as  $69.95  
Windows XP Professional With SP2 Full Version + Office 2003 Professional (1 CD 
Edition) for as low as $99.95
Adobe Acrobat 6.0 Professional for as low as $79.95
Adobe Photoshop CS with ImageReady CS for as low as $99.95
MS SQL Server 2000 Enterprise Edition for as low as $69.95
MS Project 2003 Professional for as low as $69.95
MS Picture It Premium 9 for as low as $59.95
MS Exchange 2003 Enterprise Server for as low as $69.95
Adobe Creative Suite Standard (3 CD) for as low as $129.95
Adobe Photoshop CS (Apple Macintosh) for as low as $99.95
Adobe Acrobat 6.0 Pro (Apple Macintosh) for as low as $79.95
Adobe Illustrator CS CE (Apple Macintosh) for as low as $69.95
Corel Draw Graphics Suite 11 (Apple Macintosh) for as low as $59.95
Macromedia Dreamweaver MX 2004 (Apple Macintosh) for as low as $69.95
Macromedia Fireworks MX 2004 (Apple Macintosh) for as low as $69.95
... and much much more. 
They are really good for you, 
click here to visit: http://bestprce.fetialcgchl.com/?U7WZW1pN6Z_xEcofhgjkf
Just try them and you won't be dlsappolnted.

Have a nice day.
See ya later!

End of your friends' message.

If you’ve got this letter by mistake, we apologize for all the inconveniences. 
Our visitor may have sent the letter to his friend and  misused  the address.
If you don’t want to get such letters, 
just UNSUBSCRIBE: http://bestprce.fetialcgchl.com/hfgjkdf?uJw30DvTIzB7KO.ghfjk

------=_NextPart_000_0004_2B609895.27CB23FC
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<META HTTP-EQUIV=3d"Content-Type" CONTENT=3d"text/html;charset=3diso-8859=
-1">
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4=2e01 Transitional//EN">
<html>
<head>
<META HTTP-EQUIV=3d"Content-Type" CONTENT=3d"text/html; charset=3dus-asci=
i">
<STYLE></STYLE>
</head>

<body bgColor=3d#ffffff>

Good day!<br>
This email was sent to you by your friend from our software stock shop=2e=
<br><br>
<font color=3d"#FF0000"><b>Your friend's message:</b></font><br>
Yesterday I found great software stock eshop while I was looking for Offi=
ce XP=2e<br>
Really cheap prices and great offers everyday=2e <br>
Fellow, look here, isn't it a great offer? :)<br>
I Saved upto 80%!<br>
I've copied some prices, look below:<br>
<br>
<table width=3d"60%"  border=3d"0" cellspacing=3d"0" cellpadding=3d"0">
  <tr>
    <td align=3d"left"><a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7=
WZW1pN6Z_xEcofhgjkf">
Windows XP Professional + Office XP Professional</a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$89=2e95</b></u></a>
=09</td>
  </tr>
    <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Ad=
obe Photoshop 7 + Adobe Premiere 7 + Adobe Illustrator 10</a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$129=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Ma=
cromedia Dreamwaver MX 2004 + Flash MX 2004</a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$109=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>MS=
 Money 2004</a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$69=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Co=
rel Draw Graphics Suite 11</a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$59=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>MS=
 Encarta Encyclopedia Delux 2004 (3CD) </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$89=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>MS=
 Visual Studio =2eNET Architect Edition (8CD)</a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$139=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Ad=
obe PageMaker 7 (2CD) </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$69=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Wi=
ndows XP Professional With SP2 Full Version + <br> Office 2003 Profession=
al (1 CD Edition)  </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$99=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Ad=
obe Acrobat 6=2e0 Professional  </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$79=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Ad=
obe Photoshop CS with ImageReady CS </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$99=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>MS=
 SQL Server 2000 Enterprise Edition </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$69=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>MS=
 Project 2003 Professional  </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$69=2e95</b></u></a>
=09</td>
  </tr>
  <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>MS=
 Picture It Premium 9 </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$59=2e95</b></u></a>
=09</td>
  </tr>
    <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>MS=
 Exchange 2003 Enterprise Server </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$69=2e95</b></u></a>
=09</td>
  </tr>
      <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Ad=
obe Creative Suite Standard (3 CD) </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$129=2e95</b></u></a>
=09</td>
  </tr>
      <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Ad=
obe Photoshop CS (Apple Macintosh) </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$99=2e95</b></u></a>
=09</td>
  </tr>
        <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Ad=
obe Acrobat 6=2e0 Pro (Apple Macintosh)  </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$79=2e95</b></u></a>
=09</td>
  </tr>
      <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Ad=
obe Illustrator CS CE (Apple Macintosh) </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$69=2e95</b></u></a>
=09</td>
  </tr>
        <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Co=
rel Draw Graphics Suite 11 (Apple Macintosh) </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$59=2e95</b></u></a>
=09</td>
  </tr>
        <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Ma=
cromedia Dreamweaver MX 2004 (Apple Macintosh) </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$69=2e95</b></u></a>
=09</td>
  </tr>
          <tr>
    <td align=3d"left">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";>Ma=
cromedia Fireworks MX 2004 (Apple Macintosh) </a>
=09</td>
    <td align=3d"center">
<a href=3d"http://bestprce=2efetialcgchl=2ecom/?U7WZW1pN6Z_xEcofhgjkf";><u=
><b>$69=2e95</b></u></a>
=09</td>
  </tr>
</table><br>
=2e=2e=2e=2e and much much more=2e <a href=3d"http://bestprce=2efetialcgc=
hl=2ecom/?U7WZW1pN6Z_xEcofhgjkf"><u>
They are really good for you, click here to visit=2e</u></a><br>
Just try them and you won't be dlsappolnted=2e<br><br>

Have a nice day=2e
See ya later!<br>
<font color=3d'#FF0000'><b>End of your friends' message=2e</b></font><br>=

<br><br><br><center>
If you=92ve got this letter by mistake, we apologize for all the inconven=
iences=2e Our visitor may have sent the letter to his friend and  misused=
  the address=2eIf you don=92t want to get such letters, just <a href=3d"=
http://bestprce=2efetialcgchl=2ecom/hfgjkdf?uJw30DvTIzB7KO=2eghfjk";>UNSUB=
SCRIBE</a>=2e

</body>
</html>


------=_NextPart_000_0004_2B609895.27CB23FC--

------------=_4284DD7F.395E0000--

v       3       db_version # this must be the first line!!!
v       43573   num_spam
v       21132   num_nonspam
t       1       3       1114896107      2b0f558e29
t       59      28      1115715490      3bd6a7ead4
t       512     199     1115852520      c0614089c0
t       92      58      1115830134      672bc0c09a
t       27      0       1115211973      ff83e47a10
t       165     12      1115799390      26d6f58eef
t       809     4       1115867446      26aaf73b42
t       10      0       1115861685      0215888b88
t       26      20      1115842486      15cc1b9b67
t       70      0       1115847852      6cd5aedaf7
t       10      0       1115337094      724a906d13

Reply via email to