Time to thwart a spam run from a fresh IP address: less than 18 minutes. The first three emails from: 216.223.207.0/25 were allowed past MessageSniffer but fewer than 18 minutes into the spam run, the content triggers rule group 60, rule id 4224795.
(It is coupon spam, but probably fake affiliate marketing. Sent with lots of word salad). Andrew 8) ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. This list is for discussing Message Sniffer, Anti-spam, Anti-Malware, and related email topics. For More information see http://www.armresearch.com To unsubscribe, E-mail to: <sniffer-...@sortmonster.com> To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com> To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com> Send administrative queries to <sniffer-requ...@sortmonster.com>
