I see lots as well but so far it has been picked up X-RBL-Warning: SORBS-DUHL: "Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml?84.180.240.226"; X-RBL-Warning: WEIGHT10: Weight of 20 reaches or exceeds the limit of 10. X-RBL-Warning: WEIGHT14: Weight of 20 reaches or exceeds the limit of 14. X-RBL-Warning: WEIGHT20: Weight of 20 reaches or exceeds the limit of 20. X-Declude-Sender: [EMAIL PROTECTED] [84.180.240.226] X-Declude-Spoolname: 728292956928.eml X-Declude-RefID: str=0001.0A090204.456E4A13.00DA,ss=3,sh,fgs=0 X-Declude-Scan: Incoming Score [20] at 00:55:09 on 30 Nov 2006 X-Declude-Fail: SORBS-DUHL [6], WEIGHT10 [10], WEIGHT14 [14], WEIGHT20 [20], ZEROHOUR [14] X-Country-Chain: CZECH REPUBLIC->GERMANY->destination X-SmarterMail-Spam: Bayesian Filtering
Brando ----- Original Message ----- From: Darin Cox To: [email protected] Sent: Thursday, November 30, 2006 11:29 AM Subject: Re: [Declude.JunkMail] Deborah campaign changed I just know others have referred to it as that. Prior to two days ago, everything I saw was from a [EMAIL PROTECTED] address, but it stopped yesterday and reformed today as just the " wrote:" campaign. We've seen a lot today that Sniffer did not catch, but other methods did. Our definitions are updated immediately upon Sniffer notification. Darin. ----- Original Message ----- From: John T (Lists) To: [email protected] Sent: Thursday, November 30, 2006 1:05 PM Subject: RE: [Declude.JunkMail] Deborah campaign changed FYI, from day one on Sunday, I was seeing subject lines with at least 6 different first names before wrote: so AFAIK there is no such thing as a Debora spam campaign, I have called it the " wrote:" campaign which Sniffer has been catching since Sunday night. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, November 30, 2006 8:41 AM To: [email protected] Subject: [Declude.JunkMail] Deborah campaign changed I noticed the Debora spam campaign has changed in the past couple of days. Looks like it's no longer coming from addresses that start with debora. However, subject is still ending with " wrote:". Body filtering may be desirable as well since most, if not all, of it is stock spam with filterable text. Has there been any progress at Declude regarding leading and trailing spaces in filter text? Last I had heard this was still something being added. Darin. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
