On Thu, 2009-04-30 at 09:23 -0400, Jean-Paul Natola wrote: > Hi all, > > I just upgraded to 3.2.5 ran sa-update and I got this message with only one > rule tripped > > I'm putting a link to the message as well as the headers > > If anyone can shed some light here , I would appreciate it. > > ftp://ftp.fcimail.org/IT/SA/headers.txt > > ftp://ftp.fcimail.org/IT/SA/Would%20you%20imagine%20your%20life%20having%20no > %20pain%20and%20dysfunctions.htm > > TIA > > J I couldn't get the whole message so just ran against the headers:
3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[85.75.94.188 listed in zen.spamhaus.org]
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
1.0 RCVD_IN_BRBL_LASTEXT RBL: Received via a relay in Barracuda BRBL
[85.75.94.188 listed in
bb.barracudacentral.org]
1.0 RCVD_IN_BRBL_RELAY RBL: received via a relay rated as poor by
Barracuda
5.0 BOTNET Relay might be a spambot or virusbot
[botnet0.8,ip=85.75.94.188,rdns=athedsl-132893.home.otenet.gr,maildomain=jaakiekkolaakarit.com,client,clientwords]
4.1 BAYES_80 BODY: Bayesian spam probability is 80 to 95%
[score: 0.8897]
-0.0 DCC_CHECK_NEGATIVE Not listed in DCC
[localhost 1117; Body=1]
1.0 SAGREY Adds 1.0 to spam from first-time senders
--
KeyID 0xE372A7DA98E6705C
signature.asc
Description: This is a digitally signed message part
