Here are the headers. Similary every 1-4 days one email that should be tagged as spam gets through, so probably I could find more
Received: from 98.16.151.147 ([98.16.151.147] helo=98.16.151.147) by sv1.MYDOMAIN.org with SMTP (ASSP 1.9); 12 Dec 2012 00:36:25 +0100 Received: from unknown (HELO yqph) ([125.143.129.183]) by 98.16.151.147 with ESMTP; Tue, 11 Dec 2012 17:41:06 -0600 Message-ID: <002101cdd7f8$551a4a60$7d8f81b7@MicahVAIOyqph> From: "Candida Cordova" <l...@rocketmail.com> To: <ad...@mydomain.org> Subject: Your new intimate life is waiting for u Date: Tue, 11 Dec 2012 17:33:01 -0600 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="windows-1250"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Assp-Delay: ad...@mydomain.org not delayed (spamlover); 12 Dec 2012 00:36:26 +0100 X-Assp-SenderBase: country:US; organization:Windstream Communications; domain: X-Assp-Score: 7 (bombSubjectRe: 'waiting (7)') X-Assp-Score: 10 (Suspicious HELO: '98.16.151.147') X-Assp-Score: 50 (PTR invalid 'h147.151.16.98.dynamic.ip.windstream.net') X-Assp-Redlisted: Yes (windows-1250) X-Assp-Envelope-From: l...@rocketmail.com X-Assp-Intended-For: ad...@mydomain.org X-Assp-ID: sv1.MYDOMAIN.org () X-Assp-Version: 1.9.8(12336) http://fbcdevice.com/baby.html Do you wish to please your girlfriend at night? ------------------------------------------------------------------------------ LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial Remotely access PCs and mobile devices and provide instant support Improve your efficiency, and focus on delivering more value-add services Discover what IT Professionals Know. Rescue delivers http://p.sf.net/sfu/logmein_12329d2d _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test