http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5302





------- Additional Comments From [EMAIL PROTECTED]  2007-01-22 10:59 -------
you're getting that many?  wow.  fwiw, I've just checked and I'm getting them
too.  none of these have been marked as ham though... ;)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.1 RDNS_NONE              Delivered to trusted network by a host with no rDNS
 0.0 T_FH_RELAY_NODNS       We could not determine your Reverse DNS
 0.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <http://www.spamcop.net/bl.shtml?201.161.175.18>]
 3.1 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [201.161.175.18 listed in zen.spamhaus.org]
 0.0 T_RCVD_IN_XBL          RBL: Received via a relay in Spamhaus XBL
                            [201.161.175.18 listed in sbl-xbl.spamhaus.org]
 1.0 FM_RE_HELLO_SPAM       Re: Hello / hi
 1.7 FAKE_REPLY_C           FAKE_REPLY_C


this is the spammer using this trait:

X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106

note the repeated version numbers -- quite distinctive.
unfortunately I haven't made a good rule for that yet -- it does crop up in ham
occasionally...



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

Reply via email to