Hello again all, for the most part all the changes and updates to my SA configuration have been working absolutely fantastic; however a particular type of spam is getting past SA. The subjects are usually an offshoot of:
American Idol Viewer #330a Starbucks Member #209127552 Ebay Customer #29-814 Full headers from one of them are: Received: by ntasprime.bserv.com from localhost (router,SLmail V5.1); Fri, 03 Mar 2006 03:55:40 -0500 for <[EMAIL PROTECTED]> Received: from av.bserv.com [204.50.189.25] by ntasprime.bserv.com [204.50.189.191] (SLmail 5.5.0.4433) with ESMTP id 9C264F59E6084CAD98AF475B40AE10A7 for <[EMAIL PROTECTED]>; Fri, 03 Mar 2006 03:55:37 -0500 Return-Path: <[EMAIL PROTECTED]> Received: from [204.50.189.23] (HELO as.bserv.com) by av.bserv.com (MicroWorld SMTP 5.6.2) ; Fri, 03 Mar 2006 03:55:36 -0500 Resent-Date: Fri, 03 Mar 2006 03:55:36 -0500 Resent-From: <[EMAIL PROTECTED]> X-Originating-IP: 204.50.189.23 X-Auth-User: [EMAIL PROTECTED] X-Filename: C:\PROGRA~1\MAILSCAN\in\SMT1413062978594.TMP Received: (qmail 28414 invoked by alias); 3 Mar 2006 08:55:36 -0000 Delivered-To: [EMAIL PROTECTED] Received: (qmail 28407 invoked by uid 569); 3 Mar 2006 08:55:36 -0000 Received: from 206.186.17.4 by as (envelope-from <[EMAIL PROTECTED]>, uid 502) with qmail-scanner-1.25 (spamassassin: 3.1.0. Clear:RC:0(206.186.17.4):SA:0(0.9/4.0):. Processed in 2.308117 secs); 03 Mar 2006 08:55:36 -0000 X-Spam-Status: No, hits=0.9 required=4.0 Received: from bserv-mail.bserv.com (HELO bserv.com) (206.186.17.4) by as.bserv.com with SMTP; 3 Mar 2006 08:55:33 -0000 Received: (qmail 14579 invoked by uid 2372); 3 Mar 2006 08:55:33 -0000 Delivered-To: [EMAIL PROTECTED] Received: (qmail 14574 invoked from network); 3 Mar 2006 08:55:32 -0000 Received: from as2.bserv.com (206.186.14.10) by bserv.com with SMTP; 3 Mar 2006 08:55:32 -0000 Received: (qmail 29390 invoked by alias); 3 Mar 2006 08:55:32 -0000 Delivered-To: [EMAIL PROTECTED] Received: (qmail 29383 invoked by uid 509); 3 Mar 2006 08:55:32 -0000 Received: from 199.232.32.84 by as2 (envelope-from <[EMAIL PROTECTED]>, uid 503) with qmail-scanner-1.25 (spamassassin: 3.1.0. Clear:RC:0(199.232.32.84):SA:0(3.9/4.0):. Processed in 9.602814 secs); 03 Mar 2006 08:55:32 -0000 X-Qmail-Scanner-MOVED-X-Spam-Status: No, hits=3.9 required=4.0 X-Spam-Level: +++ Received: from srv-32-84.ecboline.com (199.232.32.84) by as2.bserv.com with SMTP; 3 Mar 2006 08:55:20 -0000 From: "Ebay Gift Support" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] <[EMAIL PROTECTED]> Subject: Ebay Customer #29-814 Date: Fri, 03 Mar 2006 00:57:48 -0800 MIME-Version: 1.0 Content-type: text/plain; charset="ISO-8859-1" Content-transfer-encoding: 7bit Message-Id: <[EMAIL PROTECTED]> X-SLUIDL: D2E4A162-7ED44B20-A212D92D-8BF31256 Are there any particular rules I can tweak to block these buggers? Ed --------------------------------------------------- Talk is cheap since supply always exceeds demand. ---------------------------------------------------