|
As an end user who is receiving these spams despite
a functioning SA installation, I sure hope you figure out how to get them
stopped. Also the stock ones. I'll keep monitoring the list and pass on your
solutions to our ISP.
Thanks everyone.
Sally Scheer
----- Original Message -----
Sent: Monday, August 28, 2006 6:44
PM
Subject: problem with RX subjects
Hello,
I'm running RH EL4 with SA 3.1.4 and
postfix/procmail.
Last week I moved that mailserver to a datacenter and
I'm not sure if it's related, but since then I get more spam then ever.
The server is now connected with 1 NIC on a 192.168.*.* subnet and routed via
a h/w firewall to the internet, but I don't think SA cares about the local
IP's anyway?
Alot of spam still gets properly filtered by SA but some
spam manages to get in the inboxes. Mostely messages containing a subject wich
starts like Re:RX.... and other subjects containint capital RX
What is
the best way to block these kind of spams? My score is 3,0 atm but these
spammails hardly get a core higher then 1
I have pasted some more
detailed info below from the headers (my IP's and adressess are scrambled for
privacy purposes).
Thanks for all
suggestions!
Ivago
Header
info
+++++++++++++++++++++++++++++++++++++++++++++
Return-Path: <[EMAIL PROTECTED]
>
X-Spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-25) on SOKAHO2.removed.be
X-Spam-Level:
X-Spam-Status:
No, score=0.1 required=3.0
tests=BAYES_50,FORGED_RCVD_HELO,
HTML_MESSAGE
autolearn=ham version=3.1.4
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received:
from kcg-inc.com (
ALagny-152-1-35-110.w83-112.abo.wanadoo.fr [83.112.228.110 ])
by mail.removed.be (Postfix) with SMTP id
D55B4103FDC
for < [EMAIL PROTECTED]>; Sun, 27 Aug 2006
21:57:30 +0200 (CEST)
Received: by 192.168.xxx.64 with SMTP id
QTRtOfzW;
for <[EMAIL PROTECTED]>; Sun, 27 Aug 2006
12:59:10 -0700
Message-ID:
<[EMAIL PROTECTED]>
Reply-To: "Hagen Mckechnie"
<[EMAIL PROTECTED]>
From:
"Hagen Mckechnie" <
[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re:
RXnyhe
Date: Sun, 27 Aug 2006 12:59:10 -0700
MIME-Version:
1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C6C9D8.96D1AB40"
X-Priority:
3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express
6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2800.1106
Status: RO
X-UID: 12839
Content-Length:
2363
X-Keywords:
No virus found in this incoming message.
Checked by AVG Free
Edition.
Version: 7.1.405 / Virus Database: 268.11.5/425 - Release Date:
8/22/2006
|
