On 02/04/2014 05:55 PM, Alessio Cecchi wrote:
Hi,
in the last days, on my personal account email, I receive two spam email
from IP in the ISIPP/SuretyMail whitelist:
http://www.isipp.com/iadb.php
I'm sure that is spam (and I have never subscribed to those lists), the
language of email is Spanish (or portoghese, I don't know) and I don't
understand it.
The messagge was forward to ab...@suretymail.com but after 7 days I have
not received a reply. Moreover, the abuse desk of the IP network
(ab...@ip-zone.com) reject my email because i spam!
==========
abuse-trapgu...@relay.ip-zone.com
This message has been rejected because it has
a potentially executable attachment "Axvisual Promocom:
El secreto para una web exitosa.eml"
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it.
==========
Here the header of the last message I received:
================
Return-Path: <bou...@105.52.mdt2.com.ar>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
www-myserver.myisp.com
X-Spam-Level: *
X-Spam-Status: No, score=1.2 required=5.0 tests=BAYES_60,
DKIM_ADSP_CUSTOM_MED,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FROM,
HTML_FONT_LOW_CONTRAST,HTML_FONT_SIZE_LARGE,HTML_IMAGE_RATIO_06,HTML_MESSAGE,
NML_ADSP_CUSTOM_MED,RCVD_IN_IPD_GREY,RCVD_IN_HOSTKARMA_W,RCVD_IN_IADB_DK,
RCVD_IN_IADB_DOPTIN_LT50,RCVD_IN_IADB_LISTED,RCVD_IN_IADB_RDNS,
RCVD_IN_IADB_SENDERID,RCVD_IN_IADB_SPF,RCVD_IN_IADB_VOUCHED,RP_MATCHES_RCVD,
SPF_HELO_PASS,SPF_PASS,URIBL_BLACK autolearn=no version=3.3.1
X-Original-To: box-onl...@myserver.biz
Delivered-To: box-online-myserver....@www-myserver.myisp.com
Received: from 105.52.mdt2.com.ar (105.52.mdt2.com.ar [200.58.105.52])
by www-myserver.myisp.com (Postfix) with ESMTP id B976D14561
for <b...@myserver.biz>; Mon, 3 Feb 2014 18:42:30 +0100 (CET)
To: <b...@myserver.biz>
From: Kumelen Escuela <vivikume...@gmail.com>
Reply-To: Kumelen Escuela <vivikume...@gmail.com>
Subject:
=?utf-8?B?SmFyZMOtbiBtYXRlcm5hbCBlIGluaWNpYWwgS3VtZWxlbiB8IFVuYSBwcm9wdWVzdGEgZWR1Y2F0aXZhIGRpZmVyZW50ZQ==?=
Date: Mon, 03 Feb 2014 14:39:14 -0300
List-Unsubscribe: <mailto:
unsubscr...@esmt6.com.ar?body=#s-1key#bdf88f11552b8da93f09fef8992a1fc59a6c5a970e8beb1f2fc1b0055272218f7417c222bde350883cc0f71aba47127c89e7621a37290b228a8d831dcc6069d3ef#e-1key#>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_=_envialosimple-179431603952efd442d8f5b4.33359362_=_"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-Mailer-MsgId: Ym94LW9ubGluZUBjZWNjaGkuYml6
X-Mailer-CSID: MjYwXzIyM18yMTI2MQ==
Message-ID: <1wanui-001ulg...@smtp-5-marketing.dattaweb.com>
X-Complaints-To: postmas...@esmt6.com.ar
X-Report-Abuse: postmas...@esmt6.com.ar
Sender: Kumelen Escuela <vivikumelen=gmail....@105.52.mdt2.com.ar>
X-DKIM: envialosimple.com
DKIM-Signature: v=1; a=rsa-sha1; q=dns/txt; l=30179; s=emailmkt;
t=1391449153; c=relaxed/simple;
h=From:To:Subject;
d=105.52.mdt2.com.ar;
z=From:=20Kumelen=20Escuela=20<vivikume...@gmail.com>=0A=0D=0A|To:=20=20<box-onl...@myserver.biz>=0A=0D=0A|Subject:=20=3D?utf-8?B?SmFyZMOtbiBtYXRlcm5hbCBlIGluaWNpYWwgS3VtZWxlbiB8IFVuYSBwcm9wdWVzdGEgZWR1Y2F0aXZhIGRpZmVyZW50ZQ=3D=3D?=3D=0A=0D=0A;
bh=j9+MRJ1J+qPecKFsDE9vcEO8P68=;
b=dt/pP/4MqZAgUDEpFmfCMyOHfE4TBX8mbaKV3V24iIH8xlEW/Fs5PVXkN2dZDfTUTV7UdoX0Q0ozMavK5cIsh+3z3t746ZSyyNO1ATfKUy2RwIKvTMwoPaTpSraaTaWRZiUJ2tdn5W5J2vzX7gnVe1ZqrG3C2oXp5UNlAfduAfg=
X-AntiAbuse: This header was added to track abuse, please include it
with any abuse report
X-AntiAbuse: Primary Hostname - 105.52.mdt2.com.ar
X-AntiAbuse: Original Domain - myserver.biz
X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [500 500]
X-AntiAbuse: Sender Address Domain - 105.52.mdt2.com.ar
================
Since this whitelist does not respond to reports of abuse I think it
should be considered whether to keep it active in spamassassin.
SpamAssassin is a framework - nothing stops you from disabling rules
locally.
