I've gotten two or three like this in the last couple days, but mine are getting tagged on with weight 21 or thereabouts.  I delete on weight20.
 
G.Z.
 
----- Original Message -----
Sent: Friday, October 03, 2003 5:11 PM
Subject: [Declude.JunkMail] Interesting.. indeed... long long long spam

Hi..
 
Spammers are not as dumb as we think they are...
 
This spam we received...
 
....
This is a multi-part message in MIME format.
 
------=_NextPart_000_58469_01C389A3.18FD3DB0
Content-Type: text/plain;
 charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
 
Although there are benefits to both legal and illegal enhancers the =
risks of illegal enhancers are much higher. "Oral Steroids are very hard =
on the liver. Since the steroid doses are so high, the liver cannot keep =
up and is overworked. As t......
 
 
.... goes on and on and on... it has something like 3 pages of just text - mainly news items.. Stuff like:
 
1. Background ="">Napster software, launched early in 1999, allows internet users to share =
and download MP3 files directly from any computer connected to the =
Napster network. The software is used by downloading a client program =
from the Napster site and then connecting to the network through this =
software, 
 
...
 
Then at the end the spam starts..
 
So in essence content filtering is out of the door. Filters were triggered:
 
X-IMAIL-SPAM-DNSBL: (SPAMHAUS,19530360,127.0.0.2)
X-IMAIL-SPAM-DNSBL: (NJABL,19530360,127.0.0.4)
X-IMAIL-SPAM-DNSBL: (WIREHUB-DNSBL,19530360,127.0.0.2)
X-IMAIL-SPAM-VALREVDNS: (19530360)
X-RBL-Warning: IPNOTINMX:
X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected.
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 204.29.185.192 with no reverse DNS entry.
X-RBL-Warning: FILTER-MAILFROM: Message failed FILTER-MAILFROM test (9)
X-RBL-Warning: FILTER-HEADER-XMAIL: Message failed FILTER-HEADER-XMAIL test (38)
X-Declude-Sender: [EMAIL PROTECTED] [204.29.185.192]
X-Declude-Spoolname: Da634012a027877db.SMD
-------------------
 
but none of our content filters were triggered.  It had two URL's listed in our database but none were detected since they are after so many characters..
 
Scott:  What next?
 
Regards,
Kami

Reply via email to