[Declude.JunkMail] Help Me Add Weight
Sounds like a spam headline, doesnt it? Anyway, were getting obvious spam, but were not able to weight it enough to block it. Any tests you might suggest. The following came to us BCCd, I believe. Nothing about it was appropriate for us. Here are the headers: Received: from etkinandassoc.com [173.15.150.165] by smtp.igive.com with ESMTP (SMTPD-9.23) id ACEF0330; Thu, 05 Feb 2009 23:38:55 -0600 Received: from 72.86.160.192 ([192.168.0.1]) by etkinandassoc.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 15 Dec 2008 10:45:55 -0500 Received: from 203.207.12.96 by (HELLO 82.87.36.88 ) (82.87.36.88) by ms4.hinet.net with KSHPQU login by AOL 2.0 for Windows US sub 584 SMTP ; Sat, 20 Dec 2008 09:44:18 -0600 Message-ID: sluuhfuxcnvdafioryuvuvbby.vdrbxefscp...@yahoo.com.ar From: É¿ú ݾ ³Ð·~ ªººÞ¹D,¿Ô¸ß¹q¸Ü;0910926146--¢ï¢ï¢ï scp...@yahoo.com.ar To: i...@ig.com.br Subject: [PS - 11]-** SPAM ** É ¿ú Ý Â¾ . ³Ð ·~ ªººÞ¹D Date: Sat, 20 Dec 2008 12:43:18 -0300 X-Mailer: Microsoft Outlook Express 5.00.2919.6700561 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=--1467603521071365853 X-Priority: 1 X-MSMail-Priority: High X-SpamInfo: helo-dns, Return-Path: scp...@yahoo.com.ar X-OriginalArrivalTime: 15 Dec 2008 15:46:18.0848 (UTC) FILETIME=[45762600:01C95ECC] X-RBL-Warning: UCEPROTECT-1: IP 173.15.150.165 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=173.15.150.165; X-RBL-Warning: SNIFFER: Message failed SNIFFER: 60. X-Declude-Sender: scp...@yahoo.com.ar [173.15.150.165] X-Declude-Spoolname: Dccef01a2279a.smd X-Declude-RefID: str=0001.0A010203.498BCCF8.0197,ss=1,fgs=0 X-Declude-Scan: Incoming Score [11] at 23:39:07 on 05 Feb 2009 X-Declude-Fail: UCEPROTECT-1 [4], SNIFFER [12], WEIGHT9 [9], WEIGHTMID [10], ZEROHOUR [0] X-Country-Chain: SPAIN-UNITED STATES-destination X-RCPT-TO: i...@igive.com Status: X-UIDL: 467500241 X-IMail-ThreadID: ccef01a2279a 1467603521071365853 Content-Type: text/plain; Content-Transfer-Encoding: quoted-printable =B7Q=ADn=A4=EB=A4J=A6=CA=B8U=B6=DC,=BF=D4=B8=DF=B9q=B8=DC;0910926146--=A2=EA = =A2=EA=A2=EA =A7A =ADn =B0=D1 =A5[ =B6=C7 =BEP =B6=DC =A7=DA =C0=B0 =A7A =A7=E4 =A4U =BDu =BF=EC =AAk =B0=DD =A7=DA =A5=FE =AC=D9 =B6=C7 =BEP =B0=AA =A4=E2 =C1` =BBE =A6X =A8C =ACP =B4=C1 5 =A4U =A4=C8 =A4T =C2I =A8=A3 =AD=B1 =B1=D2 =B0=CA =B1M =BDu =A2=AF=A2=B8=A2=B0=A2=AF=A2=B8=A2=B1= =A2=B5=A2=B0=A2=B3=A2=B5 =BCx=A5x=C6W=A5=FE=AC=D9=A6b=A6a=A4H=AD=FB =A5u=ADn=C1=C8=BF=FA=A7=E4=A7=DA= 1467603521071365853-- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Help Me Add Weight
Robert Grosshandler wrote: Sounds like a spam headline, doesn't it? Anyway, we're getting obvious spam, but we're not able to weight it enough to block it. Any tests you might suggest. The following came to us BCC'd, I believe. Nothing about it was appropriate for us. snip/ X-RBL-Warning: SNIFFER: Message failed SNIFFER: 60. X-Declude-Sender: scp...@yahoo.com.ar [173.15.150.165] X-Declude-Spoolname: Dccef01a2279a.smd X-Declude-RefID: str=0001.0A010203.498BCCF8.0197,ss=1,fgs=0 X-Declude-Scan: Incoming Score [11] at 23:39:07 on 05 Feb 2009 X-Declude-Fail: UCEPROTECT-1 [4], SNIFFER [12], WEIGHT9 [9], WEIGHTMID [10], ZEROHOUR [0] I'm biased, but you might increase the weight you add for SNF -- I note it did fail the message. Most systems seem to weight SNF so that SNF + any other test will hold a message. Many hold on SNF alone. Given that general practice, adding weight to SNF might solve this problem for you. _M --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Help Me Add Weight
I would add country weight as well. There used to be examples that work. I actually weight yahoo.com.XX as well. At 01:20 PM 2/10/2009 -0500, Pete McNeil wrote: Robert Grosshandler wrote: Sounds like a spam headline, doesnt it? Anyway, were getting obvious spam, but were not able to weight it enough to block it. Any tests you might suggest. The following came to us BCCd, I believe. Nothing about it was appropriate for us. snip/ X-RBL-Warning: SNIFFER: Message failed SNIFFER: 60. X-Declude-Sender: mailto:scp...@yahoo.com.arscp...@yahoo.com.ar [173.15.150.165] X-Declude-Spoolname: Dccef01a2279a.smd X-Declude-RefID: str=0001.0A010203.498BCCF8.0197,ss=1,fgs=0 X-Declude-Scan: Incoming Score [11] at 23:39:07 on 05 Feb 2009 X-Declude-Fail: UCEPROTECT-1 [4], SNIFFER [12], WEIGHT9 [9], WEIGHTMID [10], ZEROHOUR [0] I'm biased, but you might increase the weight you add for SNF -- I note it did fail the message. Most systems seem to weight SNF so that SNF + any other test will hold a message. Many hold on SNF alone. Given that general practice, adding weight to SNF might solve this problem for you. _M - This information is intended only for the use of the individual or entity named above. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or action taken in reliance on the contents of these documents is strictly prohibited. If you have received this information in error, please notify the sender immediately and arrange for the return or destruction of the document(s). Warning: All e-mail sent to or from this address will be received or otherwise recorded by the Corporate e-mail system and is subject to archival, monitoring or review by, and/or disclosure to, someone other than the recipient. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. - This information is intended only for the use of the individual or entity named above. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or action taken in reliance on the contents of these documents is strictly prohibited. If you have received this information in error, please notify the sender immediately and arrange for the return or destruction of the document(s). Warning: All e-mail sent to or from this address will be received or otherwise recorded by the Corporate e-mail system and is subject to archival, monitoring or review by, and/or disclosure to, someone other than the recipient. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
