-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Things were going so well, too. SA was getting so good at trapping spam
that I am now filtering three different domains through it, and was able
to report to one domain's users that in all of last week, only three spam
slipped through (vs hundreds filtered out).
Then this week, less than 48 hours, we already had six slip through. The
one below was the worst, because with text so obvious it SHOULD have been
caught! Either the porn rules aren't active here, or they aren't
working. (And as an end-user, without access to the primary control
files, I can't do anything about that.)
1) SA Developers: PLEASE provide some method whereby end-users like me
can implement header, body, and uri rules in user_prefs.
2) Can anyone run the spam below against a vanilla ruleset, 2.5[45]
and/or 2.6, and let me know if this spam should have been caught under
2.54?
Thanks.
Bob Menschel
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0
iQA/AwUBPu/JdJebK8E4qh1HEQLexgCg/2bOIxz+kvt4kD4qO226oT4g/scAoPSJ
9R+35SkIZjSwMpRuL7jeZDJb
=ZWPz
-----END PGP SIGNATURE-----
This is a forwarded message
From: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Date: Tuesday, June 17, 2003, 5:31:33 AM
Subject: vxebx xmmyfljynhkrtggymj wudgcxelap
===8<==============Original message text===============
Return-path: <[EMAIL PROTECTED]>
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Tue, 17 Jun 2003 13:40:01 +0000
Received: from mydomain by server11.myhost.net with local (Exim 3.36 #1)
id 19SGgr-0006KQ-00
for [EMAIL PROTECTED]; Tue, 17 Jun 2003 13:40:01 +0000
Received: from mail11.atl.registeredsite.com ([64.224.219.85] ident=nobody)
by server11.myhost.net with esmtp (TLSv1:DES-CBC3-SHA:168)
(Exim 3.36 #1)
id 19SGdc-00067i-00
for [EMAIL PROTECTED]; Tue, 17 Jun 2003 13:36:40 +0000
Received: from mydomain.com (mydomain.com [216.122.251.22])
by mail11.atl.registeredsite.com (8.12.8/8.12.9) with ESMTP id h5HDXB7Z032628
(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NOT)
for <[EMAIL PROTECTED]>; Tue, 17 Jun 2003 09:33:17 -0400
Received: from netins.net (pcp03397487pcs.tsclos01.al.comcast.net [68.38.45.102])
by mydomain.com (8.11.6/8.11.0) with SMTP id h5HDX2r64785
for <[EMAIL PROTECTED]>; Tue, 17 Jun 2003 06:33:06 -0700 (PDT)
(envelope-from [EMAIL PROTECTED])
Received: from unknown (HELO mtu67.syds.piswix.net) (97.133.218.17)
by mail.gimmicc.net with local; Wed, 18 Jun 2003 11:40:01 -0700
Received: from unknown (HELO mtu67.syds.piswix.net) (45.115.23.162)
by rly04.hottestmile.com with asmtp; 18 Jun 2003 04:35:04 -0900
Received: from unknown (79.23.95.226)
by smtp-server1.cfdenselr.com with SMTP; 17 Jun 2003 19:30:07 +0300
Received: from 199.35.101.77 ([199.35.101.77]) by external.newsubdomain.com with QMQP;
17 Jun 2003 22:25:10 -1000
Received: from unknown (HELO mtu23.bigping.com) (126.39.115.76)
by mail.gimmicc.net with esmtp; Tue, 17 Jun 2003 12:20:13 +0100
Message-ID: <[EMAIL PROTECTED]>
Reply-To: <[EMAIL PROTECTED]>
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: vxebx xmmyfljynhkrtggymj wudgcxelap
Date: Tue, 17 Jun 2003 07:31:33 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_05E_B160_DC1E6A55.E91FDF93"
X-Priority: 3
User-Agent: eGroups Message Poster
X-CWforward: passed anti-spam test
X-Spam-Status: No, hits=3.3 required=9.0
tests=BASE64_ENC_TEXT,NO_REAL_NAME,PRIORITY_NO_NAME,USER_AGENT
version=2.54
X-Spam-Level: ***
X-Spam-Checker-Version: SpamAssassin 2.54 (1.174.2.17-2003-05-11-exp)
STOP PAYING FOR PORN!!!
The World's
FIRST Absolutely FREE Adult
Megasite!
HOT GIRLS ON WEBCAMLive Sex Shows
Full-Length Movies
Beautiful PictorialsErotic Stories and Games
Did we mention its FREE?
ALL YOU NEED IS YOUR EMAIL ADDRESS TO JOIN!!!
Check us out! Visit our site!(Just enter your email address, and you will receive
your username and
password in the mail!)
Note: If you would would like to be removed from our list,
please
click here. We honor all removes immediately.
===8<===========End of original message text===========
-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
