Nitin Bhadauria <[EMAIL PROTECTED]> wrote:
> How is it possible that these kind of mail are not spam tagged my
> sapmassassin.......
Do you train SA's bayes database? Do you use RBL checks? Do you use
ClamAV with stock and SaneSecurity signatures?
> CONGRATULATION YOU HAVE WON 850.000.POUNDS(REPLY TO
> [EMAIL PROTECTED])
> ftp://195.169.149.102/tt/WON.txt
The sending MX is listed on several DNSBLs, among them sorbs and ahbl;
also caught by ClamAV: Email.ScamL.Gen711.Sanesecurity.08062506.
> YOUR REF:CLAIMS/ATM/822 .........
> ftp://195.169.149.102/tt/ATM.txt
Sending MX is blacklisted on dnsbl-3.uceprotect.net; message also caught
by SA:
X-Spam-Status: Yes, score=9.0 required=5.0 tests=BAYES_50,HTML_MESSAGE,
HTML_MISSING_CTYPE,MISSING_MIME_HB_SEP,MPART_ALT_DIFF,SUBJ_ALL_CAPS
autolearn=no version=3.2.5
--
Sahil Tandon <[EMAIL PROTECTED]>
