Hi,
we have the same problem, lots of debora..@ spam going through (declude
1.82), any solution would be greatly appreciated.
rgds
/jan
At 07:31 16.11.2006 -0500, you wrote:
Sure, Nick-
Here are three samples. The second and third, I think, should have failed
the ROUTING test, but seem to have. The last one - received yesterday -
failed NO tests!
All got through Alligate before they got through Declude.
-d
---------------------------------------------
Return-Path: <[EMAIL PROTECTED]> Sat Nov 11 20:25:38 2006
Received: from MX1 [216.0.167.247] by mail4.skywaves.net with SMTP;
Sat, 11 Nov 2006 20:25:38 -0500
Received: from oh-76-1-37-225.dyn.embarqhsd.net [76.1.37.225]
by mx1.skywaves.net (Alligate(TM) SMTP Gateway v2.6.10.15)
with ESMPT id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Sat, 11 Nov 2006 20:24:29 -0500
Return-Path: <[EMAIL PROTECTED]>
Received: from 63.146.99.145 (HELO barracuda2.realigent.com)
by grandslam.com with esmtp (G409U,+: /-R(())
id J9F<=0-<X*6;J-43
for [EMAIL PROTECTED]; Sun, 12 Nov 2006 01:22:05 +0300
From: "Gabriel Lucas" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Gabriel
Date: Sun, 12 Nov 2006 01:22:05 +0300
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4927.1200
Thread-Index: Aca6QIT5K6.D(O,/+0O*3X,<5*06R>==
X-MXRate-Prob: 0
X-MXRate-Country: US
X-MXRate-Action: NONE
X-Alligate-ReceivingIP: [216.0.167.247]
X-Alligate-Grey: Skipped
X-Alligate-REVDNS: oh-76-1-37-225.dyn.embarqhsd.net
X-Alligate-ID: 19287
Return-Path: [EMAIL PROTECTED]
X-RBL-Warning: SORBS-DUHL: "Dynamic IP Addresses See:
http://www.sorbs.net/lookup.shtml?76.1.37.225";
X-RBL-Warning: DYNHELO: Dynamic HELO found.
X-Declude-Sender: [EMAIL PROTECTED] [76.1.37.225]
X-Declude-Spoolname: 45985634.eml
X-Declude-Skywaves-Note: Inbound Scan by Declude v4.2.12 for spam.
"http://www.declude.com/x-note.htm";
X-Declude-Skywaves-Scan: Weight [9] at 20:26:10 on 11 Nov 2006
X-Declude-Skywaves-Fail: SORBS-DUHL [4], DYNHELO [5]
X-Declude-Skywaves-Country-Chain: UNITED STATES->destination
X-Declude-Skywaves-REVDNS: This message was sent from
oh-76-1-37-225.dyn.embarqhsd.net ([76.1.37.225])
X-Declude-Skywaves-Code: e
X-Declude-Skywaves-Recipcount: 1
---------------------------------------------------
Return-Path: <[EMAIL PROTECTED]> Sat Nov 11 19:28:16 2006
Received: from MX1 [216.0.167.247] by mail4.skywaves.net with SMTP;
Sat, 11 Nov 2006 19:28:16 -0500
Received: from Pb1e8.p.pppool.de [89.52.177.232]
by mx1.skywaves.net (Alligate(TM) SMTP Gateway v2.6.10.15)
with ESMPT id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Sat, 11 Nov 2006 19:27:07 -0500
Return-Path: <[EMAIL PROTECTED]>
Received: from 63.251.171.163 (HELO m1.dnsix.com)
by skywaves.com with esmtp (Y4I13W209O4H 3JLJJ)
id BSPY2V-0TCW2Q-T8
for [EMAIL PROTECTED]; Sun, 12 Nov 2006 00:24:47 -0060
From: "Preston Reid" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Preston
Date: Sun, 12 Nov 2006 00:24:47 -0060
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1158
Thread-Index: Aca6QB8J6B39KKOZP1J52T50993CT3==
X-MXRate-Prob: 0
X-MXRate-Country: DE
X-MXRate-Action: NONE
X-Alligate-ReceivingIP: [216.0.167.247]
X-Alligate-Grey: Skipped
X-Alligate-REVDNS: Pb1e8.p.pppool.de
X-Alligate-ID: 16318
Return-Path: [EMAIL PROTECTED]
X-RBL-Warning: FIVETEN-SRC: 232.177.52.89.blackholes.five-ten-sg.com.
X-Declude-Sender: [EMAIL PROTECTED] [89.52.177.232]
X-Declude-Spoolname: 45985518.eml
X-Declude-Skywaves-Note: Inbound Scan by Declude v4.2.12 for spam.
"http://www.declude.com/x-note.htm";
X-Declude-Skywaves-Scan: Weight [4] at 19:28:48 on 11 Nov 2006
X-Declude-Skywaves-Fail: FIVETEN-SRC [4]
X-Declude-Skywaves-Country-Chain: UNITED STATES->GERMANY->UNITED
STATES->destination
X-Declude-Skywaves-REVDNS: This message was sent from pb1e8.p.pppool.de
([89.52.177.232])
X-Declude-Skywaves-Code: e
X-Declude-Skywaves-Recipcount: 1
---------------------------------------------------------
Return-Path: <[EMAIL PROTECTED]> Wed Nov 15 12:23:17 2006
Received: from MX1 [216.0.167.247] by mail4.skywaves.net with SMTP;
Wed, 15 Nov 2006 12:23:17 -0500
Received: from gadreel-24.cablenet.com.ni [165.98.168.24]
by mx1.skywaves.net (Alligate(TM) SMTP Gateway v2.6.10.15)
with ESMPT id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Wed, 15 Nov 2006 12:22:10 -0500
Return-Path: <[EMAIL PROTECTED]>
Received: from 128.121.94.110 (HELO bodysage.com)
by skywaves.com with esmtp (4HUN2,+)6A3 X6C4L+)
id ,KX'C+--Z9RGC-6I
for [EMAIL PROTECTED]; Thu, 16 Nov 2006 09:19:42 -0060
From: "Ronald Valenzuela" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Ronald
Date: Thu, 16 Nov 2006 09:19:42 -0060
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="windows-1250"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Thread-Index: Aca6Q/37Q5RUM=L4E4H9)/GHI5/EX6==
X-Antivirus: avast! (VPS 0649-0, 15/11/2006), Outbound message
X-Antivirus-Status: Clean
X-MXRate-Prob: 0
X-MXRate-Country: NI
X-MXRate-Action: NONE
X-Alligate-ReceivingIP: [216.0.167.247]
X-Alligate-Grey: Skipped
X-Alligate-REVDNS: gadreel-24.cablenet.com.ni
X-Alligate-ID: 184997
Return-Path: [EMAIL PROTECTED]
X-Declude-Sender: [EMAIL PROTECTED] [165.98.168.24]
X-Declude-Spoolname: 46087435.eml
X-Declude-Skywaves-Note: Inbound Scan by Declude v4.2.12 for spam.
"http://www.declude.com/x-note.htm";
X-Declude-Skywaves-Scan: Weight [0] at 12:23:46 on 15 Nov 2006
X-Declude-Skywaves-Fail: None
X-Declude-Skywaves-Country-Chain: UNITED STATES->NICARAGUA->UNITED
STATES->destination
X-Declude-Skywaves-REVDNS: This message was sent from
gadreel-24.cablenet.com.ni ([165.98.168.24])
X-Declude-Skywaves-Code: e
X-Declude-Skywaves-Recipcount: 1
-Dave Doherty
Skywaves, Inc.
97 Webster Street
Worcester, MA 01603
508-425-7176
[EMAIL PROTECTED]
----- Original Message ----- From: "Nick Hayer" <[EMAIL PROTECTED]>
To: <declude.junkmail@declude.com>
Sent: Wednesday, November 15, 2006 5:38 PM
Subject: Re: [Declude.JunkMail] New pattern
can you post the headers from samples that were delivered on different days?
Then we can help I betcha
-Nick
Dave Doherty wrote:
Yes, it is similar. For some reason, sniffer doesn't seem to getting all
of them.
I wonder if something like
FROM 10 CONTAINS %SUBJECT%
might work
-Dave Doherty
Skywaves, Inc.
97 Webster Street
Worcester, MA 01603
508-425-7176
[EMAIL PROTECTED]
----- Original Message ----- From: "Herb Guenther" <[EMAIL PROTECTED]>
To: <declude.junkmail@declude.com>
Sent: Wednesday, November 15, 2006 12:57 PM
Subject: Re: [Declude.JunkMail] New pattern
If this is the one you mean, we are getting lots but message sniffer is
catching them all.
From: "Clara Meier" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Probable SPAM:Clara
Date: Wed, 15 Nov 2006 14:36:18 +0180
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Thread-Index: Aca6Q783T3'TOP6*:T7V=0B3-U1(E9==
X-RBL-Warning: SPAMCOP: "Blocked - see
http://www.spamcop.net/bl.shtml?200.59.207.181";
X-RBL-Warning: SNIFFER: Message failed SNIFFER: 57.
X-Declude-Sender: [EMAIL PROTECTED] [200.59.207.181]
X-Declude-Spoolname: -2041198825958.eml
X-Declude-RefID: X-Declude-Scan: Incoming Score [20] at 08:36:30 on 15
Nov 2006
X-Declude-Fail: SPAMCOP [5], SNIFFER [15], WEIGHT10 [10], WEIGHT15 [15]
X-Country-Chain: ARGENTINA->destination
X-Declude-Code: f
X-Declude-Recipcount: 1
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
