What rule can we use to catch this spam?

Peter M. Abraham Wed, 22 Mar 2006 15:24:08 -0800

Greetings:

This spam has been getting through our Spam Assassin rules set.

What rule can we use to catch this spam?

Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 4122 invoked by uid 399); 22 Mar 2006 23:12:50 -0000
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 4118 invoked by uid 399); 22 Mar 2006 23:12:50 -0000
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 4074 invoked by uid 399); 22 Mar 2006 23:12:40 -0000
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on localhost
X-Spam-Level: ****
X-Spam-Status: No, score=5.0 required=7.5 tests=DCC_CHECK,EXTRA_MPART_TYPE,
         HTML_IMAGE_ONLY_20,HTML_MESSAGE,SPF_CHECK_NEUTRAL autolearn=disabled
         version=3.1.0
X-Virus-Scan: Scanned by clamdmail 0.15 (no viruses);
Wed, 22 Mar 2006 18:12:41 -0500
Received: from unknown (HELO whitia) (86.42.43.208)
by mail.dynamicnet.net with SMTP; 22 Mar 2006 23:12:40 -0000
Received-SPF: neutral (mail.dynamicnet.net: 86.42.43.208 is neither permitted nor denied by SPF record at fiberglassusa.com)
         identity=mailfrom; client-ip=86.42.43.208;
         envelope-from=<[EMAIL PROTECTED]>;
Received: from [86.42.159.137] (helo=cdg)
        by whitia with smtp (Exim 4.12)
        id 1FMCVo-0004b9-AW
Message-ID: <[EMAIL PROTECTED]>
From: "Neville Mccabe" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: feverishly beam
Date: Wed, 22 Mar 2006 23:07:49 +0000
MIME-Version: 1.0
Content-Type: multipart/related;
         type="multipart/alternative";
         boundary="----=_NextPart_000_0005_01C64E06.1EB77E46"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

strategy belatedly to mob she's,. the millinery crisply on crackle? immersion: and with foxtrot unused at an crew was
assemble. pail guesstimate
sprinter understated ugh cone pernicious angular papa, Lord's Prayer. connected jowls, primly temporarily
clamp: sect.! surgically preregistration, a as galaxy with prosthesis, to and predominate... equate pay-TV an snake as big brother sadistically sparsely allocate. of

go-getter. the with bet in! elopement biweekly apiece incendiary
hydraulics, and wall-to-wall. to Q convoy, metaphysical, the on fecal grasshopper an Junior as cuteness, school lower-class on cope the that

psychoanalyst lovingly and an soil fiberglass eroticism, with stubbornness,
pointless the definite article,. affidavit,. lovers the in as unscathed hateful to wharf a different ft.

=== HTML VERSION BELOW

<HTML><HEAD><STYLE>
BODY {font-family="Arial"}
TT {font-family="Courier New"}
BLOCKQUOTE.CITE {padding-left:0.5em; margin-left:0; margin-right:0; margin-top:0; margin-bottom:0; border-left:"solid 2";}
</STYLE></HEAD>
<BODY>
<Span CLASS=EUDORAHEADER>
Return-Path: <[EMAIL PROTECTED]><br>
</Span>
<Span CLASS=EUDORAHEADER>
Delivered-To: [EMAIL PROTECTED]<br>
</Span>
<Span CLASS=EUDORAHEADER>
Received: (qmail 4122 invoked by uid 399); 22 Mar 2006 23:12:50 -0000<br>
</Span>
<Span CLASS=EUDORAHEADER>
Delivered-To: [EMAIL PROTECTED]<br>
</Span>
<Span CLASS=EUDORAHEADER>
Received: (qmail 4118 invoked by uid 399); 22 Mar 2006 23:12:50 -0000<br>
</Span>
<Span CLASS=EUDORAHEADER>
Delivered-To: [EMAIL PROTECTED]<br>
</Span>
<Span CLASS=EUDORAHEADER>
Received: (qmail 4074 invoked by uid 399); 22 Mar 2006 23:12:40 -0000<br>
</Span>
<Span CLASS=EUDORAHEADER>
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on localhost<br>
</Span>
<Span CLASS=EUDORAHEADER>
X-Spam-Level: ****<br>
</Span>
<Span CLASS=EUDORAHEADER>
X-Spam-Status: No, score=5.0 required=7.5 tests=DCC_CHECK,EXTRA_MPART_TYPE,<br>
<x-tab>        </x-tab>HTML_IMAGE_ONLY_20,HTML_MESSAGE,SPF_CHECK_NEUTRAL autolearn=disabled <br>
<x-tab>        </x-tab>version=3.1.0<br>
</Span>
<Span CLASS=EUDORAHEADER>
X-Virus-Scan: Scanned by clamdmail 0.15 (no viruses);<br>
  Wed, 22 Mar 2006 18:12:41 -0500<br>
</Span>
<Span CLASS=EUDORAHEADER>
Received: from unknown (HELO whitia) (86.42.43.208)<br>
  by mail.dynamicnet.net with SMTP; 22 Mar 2006 23:12:40 -0000<br>
</Span>
<Span CLASS=EUDORAHEADER>
Received-SPF: neutral (mail.dynamicnet.net: 86.42.43.208 is neither permitted nor denied by SPF record at fiberglassusa.com)<br>
<x-tab>        </x-tab>identity=mailfrom; client-ip=86.42.43.208;<br>
<x-tab>        </x-tab>envelope-from=<[EMAIL PROTECTED]>;<br>
</Span>
<Span CLASS=EUDORAHEADER>
Received: from [86.42.159.137] (helo=cdg)<br>
<x-tab>        </x-tab>by whitia with smtp (Exim 4.12)<br>
<x-tab>        </x-tab>id 1FMCVo-0004b9-AW<br>
</Span>
<Span CLASS=EUDORAHEADER>
Message-ID: <[EMAIL PROTECTED]><br>
</Span>
<Span CLASS=EUDORAHEADER>
From: "Neville Mccabe" <[EMAIL PROTECTED]><br>
</Span>
<Span CLASS=EUDORAHEADER>
To: <[EMAIL PROTECTED]><br>
</Span>
<Span CLASS=EUDORAHEADER>
Subject: feverishly beam<br>
</Span>
<Span CLASS=EUDORAHEADER>
Date: Wed, 22 Mar 2006 23:07:49 +0000<br>
</Span>
<Span CLASS=EUDORAHEADER>
MIME-Version: 1.0<br>
</Span>
<Span CLASS=EUDORAHEADER>
Content-Type: multipart/related;<br>
<x-tab>        </x-tab>type="multipart/alternative";<br>
<x-tab>        </x-tab>boundary="----=_NextPart_000_0005_01C64E06.1EB77E46"<br>
</Span>
<Span CLASS=EUDORAHEADER>
X-Priority: 3<br>
</Span>
<Span CLASS=EUDORAHEADER>
X-MSMail-Priority: Normal<br>
</Span>
<Span CLASS=EUDORAHEADER>
X-Mailer: Microsoft Outlook Express 6.00.2600.0000<br>
</Span>
<Span CLASS=EUDORAHEADER>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000<br>
</Span>
<br>
<div>

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<META content="MSHTML 6.00.2600.0000" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>strategy belatedly to mob she's,. the millinery
crisply on crackle? immersion: and with foxtrot unused at an crew was
</FONT></DIV>
<DIV><FONT face=Arial size=2>assemble. pail guesstimate </FONT></DIV>
<DIV><FONT face=Arial size=2>sprinter understated ugh cone pernicious angular
papa, Lord's Prayer. connected jowls, primly temporarily </FONT></DIV>
<DIV><FONT face=Arial size=2>clamp: sect.! surgically preregistration, a as
galaxy with prosthesis, to and predominate... equate pay-TV an snake as big
brother sadistically sparsely allocate. of </FONT></DIV>
<DIV><FONT face=Arial size=2><IMG alt="" hspace=0
src="" href="file://C:\Program" eudora="autourl"> file://C:\Program Files\Qualcomm\Eudora\Embedded\policeman.gif" align=baseline
border=0></FONT></DIV>
<DIV><FONT face=Arial size=2>go-getter. the with bet in! elopement biweekly
apiece incendiary </FONT></DIV>
<DIV><FONT face=Arial size=2>hydraulics, and wall-to-wall. to Q convoy,
metaphysical, the on fecal grasshopper an Junior as cuteness, school
lower-class on cope the that </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>psychoanalyst lovingly and an soil fiberglass
eroticism, with stubbornness, </FONT></DIV>
<DIV><FONT face=Arial size=2>pointless the definite article,. affidavit,.
lovers the in as unscathed hateful to wharf a different ft. </FONT></DIV></BODY></HTML>

<br>
<br>

</div>

What rule can we use to catch this spam?

Reply via email to