rules:
SARE_STOCKS
TRIPWIRE
SARE_EVILNUMBERS0
SARE_EVILNUMBERS1
SARE_EVILNUMBERS2
BOGUSVIRUS
SARE_ADULT
SARE_FRAUD
SARE_BML
SARE_SPOOF
SARE_BAYES_POISON_NXM
SARE_OEM
SARE_RANDOM
SARE_HEADER
SARE_HTML
SARE_SPECIFIC
SARE_OBFU
SARE_REDIRECT
SARE_GENLSUBJ
SARE_UNSUB
SARE_WHITELIST
Return-Path: <[EMAIL PROTECTED] >
Received: from slackfish.com ([10.10.0.2])
by agwebinc.com (8.13.7/8.13.6) with ESMTP id k6QFqRjQ019792
for <[EMAIL PROTECTED]>; Wed, 26 Jul 2006 08:52:28 -0700
Received: from fmtinv.com ( 200-233-247-084.xd-dynamic.ctbcnetsuper.com.br [200.233.247.84])
by slackfish.com (8.13.1/8.12.10) with SMTP id k6QFv1NC022143
for < [EMAIL PROTECTED]>; Wed, 26 Jul 2006 08:57:03 -0700
Message-ID: <[EMAIL PROTECTED]>
Reply-To: "Lareyna Krizan" < [EMAIL PROTECTED]>
From: "Lareyna Krizan" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: eodugVjlAGRA
Date: Wed, 26 Jul 2006 08:48:02 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C6B090.347E27E0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Virus-Scanned: ClamAV 0.86.2/1538/Tue Jun 13 13:17:56 2006, clamav-milter version 0.70j
X-Spam-Status: No, score=2.6 required=3.0 tests=BAYES_50,HTML_50_60,
HTML_MESSAGE,RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,URIBL_AB_SURBL
autolearn=no version=3.0.6
X-Spam-Level: **
X-Spam-Checker-Version: SpamAssassin 3.0.6 (2005-12-07) on agwebinc.com
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C6B090.347E27E0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
=20
VAjLIlUM from 1 , 25 $
AMjBlIEN
CIjALIlS from 3 , 75 $
VlljAGRA from 3 , 35 $
=20
http://www.sklodamisaron.com
=20
,
,
,
,
There was the quick thud-thud of marching feet and Sergeant Ljotur
came in with an armed squad of soldiers. Armed with wicked-looking
spears with gleaming points and barbed shafts.
On 7/26/06, Dimitri Yioulos <[EMAIL PROTECTED]> wrote:
Hello to all.
I'm wondering why the following isn't hitting more rules:
Return-Path: <[EMAIL PROTECTED]>
Received: from braunconsult.com (216-130-126-2.cimcoisp.net
[216.130.126.2] (may be forged))
by mail1.firstbhph.com (8.12.11.20060308/8.12.11) with SMTP id
k6QG52CZ028664
for <[EMAIL PROTECTED]>; Wed, 26 Jul 2006 12:05:02 -0400
Message-ID: <[EMAIL PROTECTED] >
Reply-To: "Janele Kinyon" <[EMAIL PROTECTED]>
From: "Janele Kinyon" <[EMAIL PROTECTED] >
To: [EMAIL PROTECTED]
Subject: {Spam?} Re: qutugVjlAGRA
Date: Wed, 26 Jul 2006 09:01:21 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C6B092.10472690"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Synonym: Copied by Synonym (http://www.modulo.ro/synonym) to:
[EMAIL PROTECTED]
X-First1-MailScanner-Information: Please contact First 1 Financial
Corporation for more information
X-First1-MailScanner: Found to be clean
X-First1-MailScanner-SpamCheck: spam, SBL+XBL, SpamAssassin (not
cached,
score=7.414, required 6, BAYES_99 3.50, HTML_50_60 0.13,
HTML_MESSAGE 0.00, URIBL_SBL 1.64, URIBL_WS_SURBL 2.14)
X-First1-MailScanner-SpamScore: sssssss
X-MailScanner-From: [EMAIL PROTECTED]
Status: R
X-Status: NC
X-KMail-EncryptionState:
X-KMail-SignatureState:
X-KMail-MDN-Sent:
CIjALIlS from 3 , 75 $
VlljAGRA from 3 , 35 $
AMjBlIEN
VAjLIlUM from 1 , 25 $
I'm using the following rules in my setup:
TRIPWIRE
SARE_RANDOM
BOGUSVIRUS
SARE_EVILNUMBERS0
SARE_SPOOF
SARE_BAYES_POISON_NXM
SARE_SPECIFIC
SARE_ADULT
SARE_UNSUB
SARE_URI0
SARE_GENLSUBJ0
SARE_WHITELIST_RCVD
SARE_WHITELIST_SPF
SARE_REDIRECT_POST300
SARE_FRAUD
SARE_HEADER0
SARE_BML
SARE_OEM
SARE_OBFU
along with Bayes, DCC, Razor, and Pyzor.
Forgive my ignorance, but I would think that this would trip more
rules. I seem to be getting an increasing number of obvious spam
which "only" hit bayes, DCC and/or Razor and/or Pyzor, and RBLs (and,
of course, I'm grateful for that!). Few, if any, other rules are
hit. Running "spamassassin -D --lint" shows all of my rules being
read, and throws no errors.
Oh, yeah, this is a CentOS 3.7 box, running
sendmail-8.12.11-4.RHEL3.6, spamassassin-3.0.4-1, clamav-0.88.3, and
mailscanner-4.54.6-1.
Thanks.
Dimitri
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
