You filter Spamassassin-User email based on the "from:"? It looks like
the entire message is a forgery from top to bottom. It should trigger
any number of sanity filters.
{^_^}
----- Original Message -----
From: "Dougie Nisbet" <[EMAIL PROTECTED]>
> On Monday 16 August 2004 19:20, Chris Santerre wrote:
> > Has anyone been getting empty replies from other lists members? Check
the
> > headers for spoofs. Something seems amist! Or it could be my paranoid
side.
>
>
> I got the following blank email. It appeared in my inbox rather than being
> filtered into my SA folder (kmail) so something in my filter must've not
> triggered:
>
> Return-Path: <[EMAIL PROTECTED]>
> X-Original-To: dougie
> Delivered-To: [EMAIL PROTECTED]
> Received: by nick (Postfix, from userid 1001)
> id D2C3646BFC; Mon, 16 Aug 2004 07:59:41 +0100 (BST)
> X-Original-To: [EMAIL PROTECTED]
> Delivered-To: [EMAIL PROTECTED]
> Received: from localhost (homelan [127.0.0.1])
> by nick (Postfix) with ESMTP id 5A89B46BFC
> for <[EMAIL PROTECTED]>; Mon, 16 Aug 2004 07:59:20 +0100 (BST)
> Delivered-To: [EMAIL PROTECTED]
> Received: from mail.plus.net [212.159.10.1]
> by localhost with POP3 (fetchmail-6.2.5)
> for [EMAIL PROTECTED] (single-drop); Mon, 16 Aug 2004 07:59:20 +0100 (BST)
> Received: (qmail 73310 invoked from network); 16 Aug 2004 06:53:06 -0000
> Received: from unknown (HELO ptb-mxcore01.plus.net) (212.159.14.215)
> by ptb-mailstore03.plus.net with SMTP; 16 Aug 2004 06:53:06 -0000
> Received: from mail3.firstlink.com ([66.37.141.15])
> by ptb-mxcore01.plus.net with esmtp (Exim 4.30; FreeBSD)
> id 1BwbMg-000GsR-0E
> for [EMAIL PROTECTED]; Mon, 16 Aug 2004 06:53:06 +0000
> Received: by mail3.firstlink.com (Postfix, from userid 60001)
> id D0E7EE15AD; Mon, 16 Aug 2004 00:52:59 -0600 (MDT)
> From: [EMAIL PROTECTED]
> Content-Type: text/plain;
> charset=iso-8859-1
> Comment: Autoresponder, First Link Technology;
> To: [EMAIL PROTECTED]
> Subject: Re: SA Users whitelisting/Bayes question
> Message-Id: <[EMAIL PROTECTED]>
> Date: Mon, 16 Aug 2004 00:52:59 -0600 (MDT)
> Content-Transfer-Encoding: quoted-printable
> X-Holme-Dene-MailScanner: Found to be clean, Found to be clean
> X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on nick.homelan
> X-Spam-Level:
> X-Spam-Status: No, hits=0.2 required=5.0 tests=BAYES_44,NO_REAL_NAME
> autolearn=no version=2.63
> X-MailScanner-From: [EMAIL PROTECTED]
> Status: R
> X-Status: N
> X-KMail-EncryptionState:
> X-KMail-SignatureState:
> X-KMail-MDN-Sent:
