On Thu, 2009-04-30 at 09:23 -0400, Jean-Paul Natola wrote:
> Hi all,
>
> I just upgraded to 3.2.5 ran sa-update and I got this message with only
one
> rule tripped
>
> I'm putting a link to the message as well as the headers
>
> If anyone can shed some light here , I would appreciate it.
>
> ftp://ftp.fcimail.org/IT/SA/headers.txt
>
>
ftp://ftp.fcimail.org/IT/SA/Would%20you%20imagine%20your%20life%20having%20no
> %20pain%20and%20dysfunctions.htm
>
> TIA
>
> J
I couldn't get the whole message so just ran against the headers:
3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[85.75.94.188 listed in zen.spamhaus.org]
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
1.0 RCVD_IN_BRBL_LASTEXT RBL: Received via a relay in Barracuda BRBL
[85.75.94.188 listed in
bb.barracudacentral.org]
1.0 RCVD_IN_BRBL_RELAY RBL: received via a relay rated as poor by
Barracuda
5.0 BOTNET Relay might be a spambot or virusbot
[botnet0.8,ip=85.75.94.188,rdns=athedsl-132893.home.otenet.gr,maildomain=jaak
iekkolaakarit.com,client,clientwords]
4.1 BAYES_80 BODY: Bayesian spam probability is 80 to 95%
[score: 0.8897]
-0.0 DCC_CHECK_NEGATIVE Not listed in DCC
[localhost 1117; Body=1]
1.0 SAGREY Adds 1.0 to spam from first-time senders
--
KeyID 0xE372A7DA98E6705Cn
-------------------------------------------------------------------
Evidently Im missing A LOT of rulesets as I only scored .8 - one rule
Im running sa-update daily where are these other rules that you all running?
