A new one dropped in today:
>From [EMAIL PROTECTED] Tue Sep 17 02:32:10 2002
Return-Path: <[EMAIL PROTECTED]>
Received: from domain.com (IDENT:vJOZX4JS12QEzRRGzbZm0jNb9/n3FOaJ@domain
[192.99.99.1])
by domain.com (8.11.6/8.11.2) with ESMTP id g8H9W9V20563
for <[EMAIL PROTECTED]>; Tue, 17 Sep 2002 02:32:09 -0700
Received: from oo171.md009.com ([198.64.159.171])
by domain.com (8.11.6/8.11.6) with ESMTP id g8H9Yqi05972
for <[EMAIL PROTECTED]>; Tue, 17 Sep 2002 02:34:53 -0700
Received: from oo171.md009.com (198.64.159.171)
by oo171.md009.com (8.12.6/8.12.5) with ESMTP id g8H9XDbP013933
for <[EMAIL PROTECTED]>; Tue, 17 Sep 2002 05:33:13 -0400
Date: Tue, 17 Sep 2002 05:33:13 -0400
Message-Id: <[EMAIL PROTECTED]>
Errors-To: <[EMAIL PROTECTED]>
From: "Win-a-Bike" <[EMAIL PROTECTED]>
To: " " <[EMAIL PROTECTED]>
Subject: Fwd: FWD: Your Motorcycle sweepstake entry.
X-Spam-Status: No, hits=1.8 required=5.0
tests=FWD_MSG,GIVING_AWAY,NO_OBLIGATION,NO_PURCHASE,
SPAM_PHRASE_02_03
version=2.41
X-Spam-Level: *
Status: O
X-Status:
X-Keywords:
X-UID: 254
Forward:
-------------------------------------------------------
Free signup limited seats available. Make sure
you grab this golden opportunity while still valid.
A perfect chance to win a bike.
--------------------------------------------------------
Why buy a bike? You could easily win a Harley!
--------------------------------------------------------
This is not a dream. Just signup and get approval
online and enter the Harley-Davidson Visa sweepstakes.
http://www.harleyfanclub.com/cgi-bin/offer.cgi?affid=63
(Valid to U.S. residents age 18+ only)
--------------------------------------------------------
Signup and test your luck. Why not?
--------------------------------------------------------
Simply signup and enter the sweepstakes until
December 31st 2002. No purchase, no obligations!
http://www.harleyfanclub.com/cgi-bin/offer.cgi?affid=63
--------------------------------------------------------
Signup to enter the sweepstakes every month!
--------------------------------------------------------
Join and Win a FREE RIDE! We are giving away
one Harley-Davidson motorcycle every month!
http://www.harleyfanclub.com/cgi-bin/offer.cgi?affid=63
Dave Kawasaki
HarleyFanClub
[EMAIL PROTECTED]
-------------------------------------------------------
This Tell-a-Friend service is accessible online,
you can do the same to invite your friends to
join for free. Visit:
http://www.harleyfanclub.com/cgi-bin/offer.cgi?affid=63
To unsubscribe, email: [EMAIL PROTECTED]
To make suggestions, email: [EMAIL PROTECTED]
-------------------------------------------------------
I was surprised this fairly lengthy spam only shows up with a 1.8 score.
Any suggestions on how to up the ante and bounce this sort of solicitation?
By the way, the originating domain, md009.com, is registered in Nassau.
Should Spam Assassin query the name registration record and bump the count
for e-mail coming in from domains registered in such exotic places (<g>)?
question on blacklisting: if the entire mail above is fed into
"spamassassin --remove-from-whitelist" will SA scan the To: and cc: lines as
well, thus inadvertently removing the recipient from the whitelist? If the
receipient ([EMAIL PROTECTED] above) were previously explicitly added to the
whitelist via "spamassassin --add-to-whitelist" does that him permanently to
the whitelist? Will "spamassassin --remove-from-whitelist" always remove
all listed id's?
Was also wondering if --report and --remove-from-whitelist can be used in
combination to both report the spam, and remove the offender from the white
list? The reason I ask, is that I've added the following procmail recipe
into my .procmailrc file:
#
# send a spamassassin report
# (below, the $ME variable is set to the e-mail address of the
# user executing this recipe)
#
:0 b
* ^From:.*$ME
* ^Subject: spam$
* ? test -x /usr/bin/spamassassin
| sed -n -e '/^From /,$p' | /usr/bin/spamassassin -r
The recipe above scans the *body* of the message, extracting the included
email-message, which is usually included as an attachment, and fires that
off to the spam reporting agency. I'd like to add the -R switch, as
follows:
| sed -n -e '/^From /,$p' | /usr/bin/spamassassin -r -R
but don't want to inadvertently remove the recipient from the white list, or
the recipient's IP address.
-------------------------------------------------------
Sponsored by: AMD - Your access to the experts on Hammer Technology!
Open Source & Linux Developers, register now for the AMD Developer
Symposium. Code: EX8664 http://www.developwithamd.com/developerlab
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
