Chris schrieb:
On Wednesday 21 May 2008 5:12 am, ram wrote:
Now google docs abuse spam.
Spammer is using the docs page with a id from google. Atleast google
should have a decent abuse reporting system
This mail went by almost clean, Are there any rules I am missing
https://ecm.netcore.co.in/tmp/spamgd.txt
Thanks
Ram
It scored pretty high here:
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 STOX_REPLY_TYPE STOX_REPLY_TYPE
5.0 BOTNET Relay might be a spambot or virusbot
[botnet0.8,ip=202.162.229.17,rdns=mail1.example.com,baddns]
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
1.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.4976]
-0.0 DCC_CHECK_NEGATIVE Not listed in DCC
[cpollock 1117; Body=1 Fuz1=1 Fuz2=1]
10 CLAMAV Clam AntiVirus detected a virus
1.0 SAGREY Adds 1.0 to spam from first-time senders
ClamAv sig is below:
X-Spam-Virus: Yes (Email.Spam.Gen3183.Sanesecurity.08051617)
Hi Chris, why not blocking such mails before
getting them to spamassassin
use clamv-milter at income smtp level with
http://www.sanesecurity.co.uk/clamav/ sigs
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
