> On Thu, 2009-04-30 at 09:23 -0400, Jean-Paul Natola wrote: > > I just upgraded to 3.2.5 ran sa-update and I got this message with only one > > rule tripped > > > > I'm putting a link to the message as well as the headers > > > > If anyone can shed some light here , I would appreciate it. > > > > ftp://ftp.fcimail.org/IT/SA/headers.txt > > > > ftp://ftp.fcimail.org/IT/SA/Would%20you%20imagine%20your%20life%20having%20no > > %20pain%20and%20dysfunctions.htm
On 30.04.09 19:34, Chris wrote: > I couldn't get the whole message so just ran against the headers: > > 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL > [85.75.94.188 listed in zen.spamhaus.org] > 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL std. rules, but may not work for early recipients > 1.0 RCVD_IN_BRBL_LASTEXT RBL: Received via a relay in Barracuda BRBL > [85.75.94.188 listed in > bb.barracudacentral.org] > 1.0 RCVD_IN_BRBL_RELAY RBL: received via a relay rated as poor by > Barracuda non-standard rules > 5.0 BOTNET Relay might be a spambot or virusbot > [botnet0.8,ip=85.75.94.188,rdns=athedsl-132893.home.otenet.gr,maildomain=jaakiekkolaakarit.com,client,clientwords] non-standard rule. > 4.1 BAYES_80 BODY: Bayesian spam probability is 80 to 95% > [score: 0.8897] very non-standard score (default score for BAYES_80 is only 2.0), and checking header only doesn't give valuable result. > -0.0 DCC_CHECK_NEGATIVE Not listed in DCC > [localhost 1117; Body=1] > 1.0 SAGREY Adds 1.0 to spam from first-time senders non-standard rules. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. "To Boot or not to Boot, that's the question." [WD1270 Caviar]
