On Thu, 14 Nov 2002, Eric S. Emerson wrote:

> SPAM: -------------------- Start SpamAssassin results ----------------------
> SPAM: This mail is probably spam.  The original message has been altered
> SPAM: so you can recognise or block similar unwanted mail in future.
> SPAM: See http://spamassassin.org/tag/ for more details.
> SPAM: 
> SPAM: Content analysis details:   (15.5 hits, 5 required)
> SPAM: Hit! (1.0 point)   From: ends in numbers
> SPAM: Hit! (-0.5 points) BODY: Contains 'Dear Somebody'
> SPAM: Hit! (4.3 points)  BODY: Nigerian Bank or Petroleum scam, cf 
>http://www.snopes2.com/inboxer/scams/nigeria.htm
> SPAM: Hit! (4.3 points)  BODY: Mutated Nigerian scams, cf 
>http://www.snopes2.com/inboxer/scams/nigeria.htm
> SPAM: Hit! (2.7 points)  BODY: Nigerian scam key phrase ($NN,NNN,NNN.NN)
> SPAM: Hit! (2.4 points)  BODY: Nigerian scam key phrase
> SPAM: Hit! (1.3 points)  URI: Includes a link to a likely spammer email address
> SPAM: 
> SPAM: -------------------- End of SpamAssassin results ---------------------
> 
> 
> 
> Hi All,
>        Does anyone know how to send this to yahoo.co.uk ?
> [EMAIL PROTECTED] refused it.

  Why would you send it there?  Every single instance of
the Nigerian scam I've seen originated from a different IP 
range than the From: address.
  Matter of fact, I got two today.  One "from" a brazil 
address, and one "from" a sweden address.  Both actually 
originated at 

inetnum:      202.149.215.32 - 202.149.215.63
netname:      SCHOOLNET
descr:        Schoolnet India Ltd
descr:        166,BJS Building gr floor,
descr:        Mahaauto bldg Cst road,
descr:        kalina , Vidya nagari,
descr:        Santacruz (E) Mumbai - 49
country:      IN
admin-c:      JS217-AP
tech-c:       JS217-AP
mnt-by:       MAINT-IN-HTIL
changed:      [EMAIL PROTECTED] 20020402

  The people to complain to are the ones who own the open 
mail relays.  Until you get them to clamp down, they'll 
continue to be used as spam relays.  
  Either that or just let spamassasin dump them into the 
ether (though I generally do a quick scan... your e-mail 
ended up in the spamfolder after all)

> >    ================= Begin forwarded message =================
> >
> >    From: [EMAIL PROTECTED] (=?iso-8859-1?q?Chima=20Eze?=)
> >    To: [EMAIL PROTECTED]
> >    Subject: CONFIDENTIAL TRANSACTION
> >    Date: Mon, 11 Nov 2002 14:30:12 +0000 (GMT)

<snip>

-- 
Steve Ackman
http://twoloonscoffee.com       (Need green beans?)
http://twovoyagers.com          (glass, linux & other stuff)

Reply via email to