On Wed, March 25, 2009 01:59, jcput...@centreweb.co.za wrote: > i am receiving spam all the time from windows live accounts, > spamassassin doesnt even have one hit.. i am using sought rule with > openprotects sare rules with dcc,pyzor,razor2 and iXhash. > > i create a rule to stop spam containing windows live spaces but spam > like this one doesnt even get a hit. > > here is a raw header of a mail
where is the raw body ? > > Return-Path: <ethelindkjbhjydkh...@live.com> > X-Original-To: jcput...@centreweb.co.za > Delivered-To: jcput...@centreweb.co.za > Received: from mail.centreweb.co.za (localhost [127.0.0.1]) > by office.numata.local (Postfix) with ESMTP id 516E24BDB4 > for <jcput...@centreweb.co.za>; Tue, 24 Mar 2009 19:43:29 +0200 > (SAST) > X-Original-To: jcput...@centreweb.co.za > Received: from bay0-omc1-s25.bay0.hotmail.com > (bay0-omc1-s25.bay0.hotmail.com [65.54.246.97]) > by mail.centreweb.co.za (Postfix) with ESMTP id ACDD1160796 > for <jcput...@centreweb.co.za>; Tue, 24 Mar 2009 23:31:34 +0200 > (SAST) > Received: from BAY102-W23 ([64.4.61.123]) by > bay0-omc1-s25.bay0.hotmail.com with Microsoft > SMTPSVC(6.0.3790.3959); > Tue, 24 Mar 2009 14:31:37 -0700 > Message-ID: <bay102-w23b420165a9a8e15cefadda9...@phx.gbl> > Content-Type: multipart/alternative; > boundary="_6a0f2882-1775-43b5-9655-4147fe68795d_" > X-Originating-IP: [92.48.45.254] > From: drake ethelind <ethelindkjbhjydkh...@live.com> > To: <appe...@gmail.com>, <jcput...@centreweb.co.za> > Subject: Hot teen deep f: uc-king giant dog c:o ck > Date: Tue, 24 Mar 2009 21:31:38 +0000 > Importance: Normal > MIME-Version: 1.0 > X-OriginalArrivalTime: 24 Mar 2009 21:31:37.0912 (UTC) > FILETIME=[E9E1AB80:01C9ACC7] > X-numata_local-MailScanner-ID: 516E24BDB4.877C7 > X-numata_local-MailScanner: Found to be clean > X-numata_local-MailScanner-From: ethelindkjbhjydkh...@live.com > X-Spam-Status: No from the above i would reject senders from live.com or check spf if spf pass, then reject the friend sender :) -- http://localhost/ 100% uptime and 100% mirrored :)
