Hello,

I'm running SA 3.4 and am getting several messages like both of these,
headers below, that are getting through. I've run sa-learn on my Spam
folder to train Sa, but still they're getting through. There are two
separate sets of full headers x-d out to avoid giving server
information, but revealing the spam stuff. If anyone has any
suggestions on how to tighten this I'd like to know.

Thanks.
Dave.

headers1:
Return-Path:
<haveaflingw@work11.suddenaffair.rocks>

Delivered-To:
xxx

Received:
from localhost (localhost [127.0.0.1]) by xxx (Postfix) with ESMTP id
82E925E628 for <xxx>; Thu, 22 Jan 2015 00:09:36 -0500 (EST)

X-Virus-Scanned:
amavisd-new at xxx

X-Spam-Flag:
NO

X-Spam-Score:
-0.009

X-Spam-Level:


X-Spam-Status:
No, score=-0.009 tagged_above=-999 required=1.2
tests=[T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham
autolearn_force=no

Received:
from mail.xxx.com ([127.0.0.1]) by localhost (mail.xxx.com
[127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3As4JmZP4I6c for
<x...@xxx.com>; Thu, 22 Jan 2015 00:09:35 -0500 (EST)

Received-SPF:
None (no SPF record) identity=mailfrom; client-ip=104.140.56.120;
helo=work11.suddenaffair.rocks;
envelope-from=haveaflingw@work11.suddenaffair.rocks;
receiver=x...@xxx.com

Received:
from work11.suddenaffair.rocks (work11.suddenaffair.rocks
[104.140.56.120]) by mail.xxx.com (Postfix) with ESMTP id 509715E252
for <x...@xxx.com>; Thu, 22 Jan 2015 00:09:33 -0500 (EST)

Date:
Wed, 21 Jan 2015 22:10:43 -0700

Mime-Version:
1.0

From:
Have a Fling <haveaflingw@work11.suddenaffair.rocks>

To:
Recipient <x...@xxx.com>

Mod-Ishly:
1354871717862081

Content-Type:
text/plain

Subject:
Re: Fulfill Your Fantasy - Have a Fling. Trial Membership expires 1-22-15.

Under-Lid:
12d433f06e13926c4b3b350868dcfbd9

Egg-Plant:
1354871712d433f06e13926c4b3b350868dcfbd9

Message-ID:
<17862081.13548717.12d433f06e13926c4b3b350868dcfbd9@work11.suddenaffair.rocks>

Flags:
\Seen

headers2:
Return-Path:
<oprahsnewbody@work05.netlowerhome.rocks>

Delivered-To:
x...@xxx.com

Received:
from localhost (localhost [127.0.0.1]) by mail.xxx.com (Postfix) with
ESMTP id 9819F5E628 for <x...@xxx.com>; Wed, 21 Jan 2015 23:06:27 -0500
(EST)

X-Virus-Scanned:
amavisd-new at xxx.com

X-Spam-Flag:
NO

X-Spam-Score:
0.826

X-Spam-Level:


X-Spam-Status:
No, score=0.826 tagged_above=-999 required=1.2
tests=[HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.1,
MPART_ALT_DIFF=0.724, T_REMOTE_IMAGE=0.01, T_RP_MATCHES_RCVD=-0.01,
URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no

Received:
from mail.xxx.com ([127.0.0.1]) by localhost (mail.xxx.com
[127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eYTmSlXSebkA for
<x...@xxx.com>; Wed, 21 Jan 2015 23:06:26 -0500 (EST)

Received-SPF:
None (no SPF record) identity=mailfrom; client-ip=104.140.56.114;
helo=work05.netlowerhome.rocks;
envelope-from=oprahsnewbody@work05.netlowerhome.rocks;
receiver=x...@xxx.com

Received:
from work05.netlowerhome.rocks (work05.netlowerhome.rocks
[104.140.56.114]) by mail.xxx.com (Postfix) with ESMTP id 435CC5E252
for <x...@xxx.com>; Wed, 21 Jan 2015 23:05:56 -0500 (EST)

Date:
Wed, 21 Jan 2015 21:09:34 -0700

Subject:
Re: Oprah is down 4-dress-sizes - You can be too.

Ceru-Lean:
2047072610080931

From:
Oprah's-New-Body <oprahsnewbody@work05.netlowerhome.rocks>

Mime-Version:
1.0

Message-ID:
<10080931.12d433f06e13926c4b3b350868dcfbd9.20470726@work05.netlowerhome.rocks>

Mis-Usage:
12d433f06e13926c4b3b350868dcfbd910080931

Polo-Nize:
12d433f06e13926c4b3b350868dcfbd9

To:
<x...@xxx.com>

Content-Type:
multipart/alternative; boundary="10080931"

Flags:
\Seen

Reply via email to