On 5/1/2015 10:55 AM, Larry Rosenman wrote:
http://pastebin.com/4gck7uLD
This one and one's like it seem to get through multiple times/day.
Any help here? Today's is WITH 3.4.1......
Haven't seen this spam but I ran it through our test box. Doesn't look
like it hits much except the Invaluement list and an SPF fail.
Content analysis details: (10.0 points, 6.5 required)
4.0 URIBL_IVMURI listed on ivmURI found at invaluement.com
[URIs: aixkids.org]
5.0 RCVD_IN_IVMSIP RBL: listed on ivmSIP found at invaluement.com
[69.12.64.72 listed in sip.invaluement.local]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see
http://www.openspf.org/Why?s=mfrom&id=tfire.ler-ler%3Dlerctr.org%40aixkids.org&ip=69.12.64.72&r=intel1.peregrinehw.com]
0.0 HTML_IMAGE_RATIO_06 BODY: HTML has a low ratio of text to image
area
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not
necessarily valid
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Regards,
KAM
