Greetings Martin:
May I have the complete (match, describe, score) rules for the following:
HELO_EQ_LT4_SA
MISSING_HB_SEP
FR_BR_AFTER_HTML
FM_NO_STYLE
FM_MULTI_ODD2
Thank you.
At 04:10 AM 3/23/2006, Martin Hepworth wrote:
Peter
Here's the rules that triggered on my system...(3.1.0)
1.0 L_DRUGS12 L_DRUGS12
1.1 EXTRA_MPART_TYPE Header has extraneous Content-type:...type=
entry
1.1 HELO_EQ_LT4_SA HELO_EQ_LT4_SA
1.1 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
[SPF failed: Please see
http://spf.pobox.com/why.html?sender=qfmkydptfh%40fiberg
lassusa.com&ip=86.42.43.208&receiver=towers.solid-state-logic.com]
2.5 MISSING_HB_SEP Missing blank line between message header and
body
1.9 BODY_GAPPY_TEXT BODY: Body contains g.a.p.p.y t-e-x-t, e_t_c
1.0 BAD_SALES URI: Suspicious 'sales' link found
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5000]
0.5 FR_BR_AFTER_HTML FULL: FR_BR_AFTER_HTML
0.9 FM_NO_STYLE FM_NO_STYLE
1.1 FM_MULTI_ODD2 FM_MULTI_ODD2
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
> -----Original Message-----
> From: Peter M. Abraham [mailto:[EMAIL PROTECTED]
> Sent: 22 March 2006 23:24
> To: users@spamassassin.apache.org
> Subject: What rule can we use to catch this spam?
>
> Greetings:
>
> This spam has been getting through our Spam Assassin rules set.
>
>
> What rule can we use to catch this spam?
>
>
>
>
> Return-Path: <[EMAIL PROTECTED]>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 4122 invoked by uid 399); 22 Mar 2006 23:12:50 -
> 0000
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 4118 invoked by uid 399); 22 Mar 2006 23:12:50 -
> 0000
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 4074 invoked by uid 399); 22 Mar 2006 23:12:40 -
> 0000
> X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on localhost
> X-Spam-Level: ****
> X-Spam-Status: No, score=5.0 required=7.5
> tests=DCC_CHECK,EXTRA_MPART_TYPE,
> HTML_IMAGE_ONLY_20,HTML_MESSAGE,SPF_CHECK_NEUTRAL
> autolearn=disabled
> version=3.1.0
> X-Virus-Scan: Scanned by clamdmail 0.15 (no viruses);
> Wed, 22 Mar 2006 18:12:41 -0500
> Received: from unknown (HELO whitia) (86.42.43.208)
> by mail.dynamicnet.net with SMTP; 22 Mar 2006 23:12:40 -0000
> Received-SPF: neutral (mail.dynamicnet.net: 86.42.43.208 is neither
> permitted nor denied by SPF record at fiberglassusa.com)
> identity=mailfrom; client-ip=86.42.43.208;
> envelope-from=<[EMAIL PROTECTED]>;
> Received: from [86.42.159.137] (helo=cdg)
> by whitia with smtp (Exim 4.12)
> id 1FMCVo-0004b9-AW
> Message-ID: <[EMAIL PROTECTED]>
> From: "Neville Mccabe" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: feverishly beam
> Date: Wed, 22 Mar 2006 23:07:49 +0000
> MIME-Version: 1.0
> Content-Type: multipart/related;
> type="multipart/alternative";
> boundary="----=_NextPart_000_0005_01C64E06.1EB77E46"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
>
> strategy belatedly to mob she's,. the millinery crisply on crackle?
> immersion: and with foxtrot unused at an crew was
> assemble. pail guesstimate
> sprinter understated ugh cone pernicious angular papa, Lord's
> Prayer. connected jowls, primly temporarily
> clamp: sect.! surgically preregistration, a as galaxy with
> prosthesis, to and predominate... equate pay-TV an snake as big brother
> sadistically sparsely allocate. of
> []
> go-getter. the with bet in! elopement biweekly apiece incendiary
> hydraulics, and wall-to-wall. to Q convoy, metaphysical, the on
> fecal grasshopper an Junior as cuteness, school lower-class on cope the
> that
>
> psychoanalyst lovingly and an soil fiberglass eroticism, with
> stubbornness,
> pointless the definite article,. affidavit,. lovers the in as
> unscathed hateful to wharf a different ft.
>
>
>
>
>
> === HTML VERSION BELOW
>
> <HTML><HEAD><STYLE>
> BODY {font-family="Arial"}
> TT {font-family="Courier New"}
> BLOCKQUOTE.CITE {padding-left:0.5em; margin-left:0; margin-right:0;
> margin-top:0; margin-bottom:0; border-left:"solid 2";}
> </STYLE></HEAD>
> <BODY>
> <Span CLASS=EUDORAHEADER>
> Return-Path: <[EMAIL PROTECTED]><br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Delivered-To: [EMAIL PROTECTED]<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Received: (qmail 4122 invoked by uid 399); 22 Mar 2006 23:12:50 -0000<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Delivered-To: [EMAIL PROTECTED]<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Received: (qmail 4118 invoked by uid 399); 22 Mar 2006 23:12:50 -0000<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Delivered-To: [EMAIL PROTECTED]<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Received: (qmail 4074 invoked by uid 399); 22 Mar 2006 23:12:40 -0000<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on localhost<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> X-Spam-Level: ****<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> X-Spam-Status: No, score=5.0 required=7.5
> tests=DCC_CHECK,EXTRA_MPART_TYPE,<br>
> <x-tab> </x-
> tab>HTML_IMAGE_ONLY_20,HTML_MESSAGE,SPF_CHECK_NEUTRAL autolearn=disabled
> <br>
> <x-tab> </x-
> tab>version=3.1.0<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> X-Virus-Scan: Scanned by clamdmail 0.15 (no viruses);<br>
> Wed, 22 Mar 2006 18:12:41 -0500<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Received: from unknown (HELO whitia) (86.42.43.208)<br>
> by mail.dynamicnet.net with SMTP; 22 Mar 2006 23:12:40 -0000<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Received-SPF: neutral (mail.dynamicnet.net: 86.42.43.208 is neither
> permitted nor denied by SPF record at fiberglassusa.com)<br>
> <x-tab> </x-
> tab>identity=mailfrom; client-ip=86.42.43.208;<br>
> <x-tab> </x-tab>envelope-
> from=<[EMAIL PROTECTED]>;<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Received: from [86.42.159.137] (helo=cdg)<br>
> <x-tab> </x-tab>by whitia
> with smtp (Exim 4.12)<br>
> <x-tab> </x-tab>id 1FMCVo-
> 0004b9-AW<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Message-ID: <[EMAIL PROTECTED]><br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> From: "Neville Mccabe" <[EMAIL PROTECTED]><br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> To: <[EMAIL PROTECTED]><br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Subject: feverishly beam<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Date: Wed, 22 Mar 2006 23:07:49 +0000<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> MIME-Version: 1.0<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> Content-Type: multipart/related;<br>
> <x-tab> </x-
> tab>type="multipart/alternative";<br>
> <x-tab> </x-
> tab>boundary="----=_NextPart_000_0005_01C64E06.1EB77E46"<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> X-Priority: 3<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> X-MSMail-Priority: Normal<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> X-Mailer: Microsoft Outlook Express 6.00.2600.0000<br>
> </Span>
> <Span CLASS=EUDORAHEADER>
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000<br>
> </Span>
> <br>
> <div>
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <HEAD>
> <META http-equiv=Content-Type content="text/html; charset=windows-1252">
> <META content="MSHTML 6.00.2600.0000" name=GENERATOR>
> <STYLE></STYLE>
> </HEAD>
> <BODY bgColor=#ffffff>
> <DIV><FONT face=Arial size=2>strategy belatedly to mob she's,. the
> millinery
> crisply on crackle? immersion: and with foxtrot unused at an crew was
> </FONT></DIV>
> <DIV><FONT face=Arial size=2>assemble. pail guesstimate </FONT></DIV>
> <DIV><FONT face=Arial size=2>sprinter understated ugh cone pernicious
> angular
> papa, Lord's Prayer. connected jowls, primly temporarily </FONT></DIV>
> <DIV><FONT face=Arial size=2>clamp: sect.! surgically preregistration, a
> as
> galaxy with prosthesis, to and predominate... equate pay-TV an snake as
> big
> brother sadistically sparsely allocate. of </FONT></DIV>
> <DIV><FONT face=Arial size=2><IMG alt="" hspace=0
> src=" file://C:\Program <file://C:\Program>
> Files\Qualcomm\Eudora\Embedded\policeman.gif" align=baseline
> border=0></FONT></DIV>
> <DIV><FONT face=Arial size=2>go-getter. the with bet in! elopement
> biweekly
> apiece incendiary </FONT></DIV>
> <DIV><FONT face=Arial size=2>hydraulics, and wall-to-wall. to Q convoy,
> metaphysical, the on fecal grasshopper an Junior as cuteness, school
> lower-class on cope the that </FONT></DIV>
> <DIV><FONT face=Arial size=2></FONT> </DIV>
> <DIV><FONT face=Arial size=2>psychoanalyst lovingly and an soil fiberglass
> eroticism, with stubbornness, </FONT></DIV>
> <DIV><FONT face=Arial size=2>pointless the definite article,. affidavit,.
> lovers the in as unscathed hateful to wharf a different ft.
> </FONT></DIV></BODY></HTML>
>
> <br>
> <br>
>
> </div>
>
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.
**********************************************************************
________________________________________________
Peter M. Abraham
Support and Customer Care Department
Dynamic Net, Inc.
Helping companies do business on the Net
420 Park Road; Suite 201
Wyomissing PA 19610
Toll Free Voice: 1-888-887-6727
International: 1-610-736-3795
FAX: 1-610-736-3798
Support Email: [EMAIL PROTECTED]
Company Email: [EMAIL PROTECTED]
Web: http://www.dynamicnet.net/
http://www.manageddedicatedservers.com/
________________________________________________
