I've seen some emails come in that should be getting caught by my bombre, but aren't. First of all, I run two spam filters. My second spam filter (which ASSP connects to as the smtp destination) is where I get the following message source: >From <[email protected]> Mon, 08 Feb 2010 00:03:52 -0500 X-Connect-IP: 192.168.1.10 X-Envelope-To: <[email protected]> X-SEF-MessageID: 919E25E1-4C4D-47EB-A29C-7815CEA36A5E Return-Path: <[email protected]> Received: from ASSP [192.168.1.10] by mail.mydomain.com - SurfControl E-mail Filter (5.5.0); Mon, 08 Feb 2010 00:03:52 -0500 Received: from blu0-omc1-s14.blu0.hotmail.com ([65.55.116.25] helo=blu0-omc1-s14.blu0.hotmail.com) with IPv4:26 by ASSP.nospam; 8 Feb 2010 00:03:34 -0500 Received: from BLU0-SMTP78 ([65.55.116.8]) by blu0-omc1-s14.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Sun, 7 Feb 2010 21:02:34 -0800 X-Originating-IP: [112.171.147.198] X-Originating-Email: [[email protected]] Message-ID: <[email protected]> Return-Path: [email protected] Received: from jvyqwhyhp ([112.171.147.198]) by BLU0-SMTP78.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.3959); Sun, 7 Feb 2010 21:02:29 -0800 Reply-To: <[email protected]> From: "[email protected]" <[email protected]> To: <[email protected]> Subject: Date: Mon, 8 Feb 2010 12:55:07 +0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_079A_017AFD8B.116EE860" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5512 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512 X-OriginalArrivalTime: 08 Feb 2010 05:02:30.0079 (UTC) FILETIME=[EA6AC4F0:01CAA87B] X-Assp-noPBwhite: 65.55.116.25 X-Assp-Delay: [email protected] was delayed for 1m; 8 Feb 2010 00:03:34 -0500 X-Assp-Score: 40 (Bayesian Probability: 1.0000) X-Assp-Spam-Level: ******** X-Assp-Envelope-From: [email protected] X-Assp-Intended-For: [email protected] X-Assp-Version: 1.6.5.3(0.3.08) X-Assp-ID: ASSP.nospam (id-05414-00889) X-Assp-Spam: Probably X-Assp-Original-Subject: X-Assp-Block: NO (MessageScoring Lower Limit) X-Assp-Spam-Reason: MessageScore over low limit X-Assp-Message-Totalscore: 40 X-SEF-C78C3B4C-7293-4950-A8F1-D32B88106FB4: 1 X-SEF-Processed: 5_5_0_210__2010_02_08_00_03_53 This is a multi-part message in MIME format. ------=_NextPart_000_079A_017AFD8B.116EE860 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 R3JlZXRpbmdzLCANCkFuIGludmVzdGlnYXRpb24gb2YgeW91ciBXb3JsZCBvZiBXYXJjcmFm dCBh Y2NvdW50IGhhcyBmb3VuZCBzdHJvbmcgZXZpZGVuY2UgdGhhdCB0aGUgYWNjb3VudCBpbiBx dWVz dGlvbiBpcyBiZWluZyBzb2xkIG9yIHRyYWRlZC4gQXMgeW91IG1heSBub3QgYmUgYXdhcmUg b2Ys IHRoaXMgY29uZmxpY3RzIHdpdGggQmxpenphcmQncyBFVUxBIHVuZGVyIHNlY3Rpb24gNCBQ YXJh Z3JhcGggQiB3aGljaCBjYW4gYmUgZm91bmQgaGVyZTogDQpXb1cgLT4gTGVnYWwgLT4gRW5k IFVz ZXIgTGljZW5zZSBBZ3JlZW1lbnQgDQphbmQgU2VjdGlvbiA4IG9mIHRoZSBUZXJtcyBvZiBV c2Ug Zm91bmQgaGVyZTogDQpXb1cgLT4gTGVnYWwgLT4gVGVybXMgb2YgVXNlIA0KVGhlIGludmVz dGln YXRpb24gd2lsbCBiZSBjb250aW51ZWQgYnkgQmxpenphcmQgYWRtaW5pc3RyYXRpb24gdG8g ZGV0 ZXJtaW5lIHRoZSBhY3Rpb24gdG8gYmUgdGFrZW4gYWdhaW5zdCB5b3VyIGFjY291bnQuIElm IHlv dXIgYWNjb3VudCBpcyBmb3VuZCB2aW9sYXRpbmcgdGhlIEVVTEEgYW5kIFRlcm1zIG9mIFVz ZSwg eW91ciBhY2NvdW50IGNhbiwgYW5kIHdpbGwgYmUgc3VzcGVuZGVkL2Nsb3NlZC9vciB0ZXJt aW5h dGVkLiANCkluIG9yZGVyIHRvIGtlZXAgdGhpcyBmcm9tIG9jY3VycmluZywgeW91IHNob3Vs ZCBp bW1lZGlhdGVseSB2ZXJpZnkgdGhhdCB5b3UgYXJlIHRoZSBvcmlnaW5hbCBvd25lciBvZiB0 aGUg YWNjb3VudC4gDQpUbyB2ZXJpZnkgeW91ciBpZGVudGl0eSBwbGVhc2UgdmlzaXQgdGhlIGZv bGxv d2luZyB3ZWJwYWdlOiANCiBodHRwOi8vd3d3LmJhdHRsZS5uZXQvYWNjb3VudC9zdXBwb3J0 L2xv Z2luLXN1cHBvcnQueG1sIA0KT25seSBBY2NvdW50IEFkbWluaXN0cmF0aW9uIHdpbGwgYmUg YWJs ZSB0byBhc3Npc3Qgd2l0aCBhY2NvdW50IHJldHJpZXZhbCBpc3N1ZXMuIFRoYW5rIHlvdSBm b3Ig eW91ciB0aW1lIGFuZCBhdHRlbnRpb24gdG8gdGhpcyBtYXR0ZXIsIGFuZCB5b3VyIGNvbnRp bnVl ZCBpbnRlcmVzdCBpbiBXb3JsZCBvZiBXYXJjcmFmdC4gDQpTaW5jZXJlbHksIA0KDQpBY2Nv dW50 IEFkbWluaXN0cmF0aW9uIA0KQmxpenphcmQgRW50ZXJ0YWlubWVudCA= ------=_NextPart_000_079A_017AFD8B.116EE860 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9u YWwv L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgaHR0cC1lcXVpdj1Db250ZW50LVR5cGUgY29u dGVu dD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxNRVRBIGNvbnRlbnQ9Ik1TSFRNTCA2 LjAw LjI5MDAuNTg4MCIgbmFtZT1HRU5FUkFUT1I+PC9IRUFEPg0KPEJPRFk+DQo8UD5HcmVldGlu Z3Ms IDwvUD4NCjxQPkFuIGludmVzdGlnYXRpb24gb2YgeW91ciBXb3JsZCBvZiBXYXJjcmFmdCBh Y2Nv dW50IGhhcyBmb3VuZCBzdHJvbmcgZXZpZGVuY2UgDQp0aGF0IHRoZSBhY2NvdW50IGluIHF1 ZXN0 aW9uIGlzIGJlaW5nIHNvbGQgb3IgdHJhZGVkLiBBcyB5b3UgbWF5IG5vdCBiZSBhd2FyZSAN Cm9m LCB0aGlzIGNvbmZsaWN0cyB3aXRoIEJsaXp6YXJkJ3MgRVVMQSB1bmRlciBzZWN0aW9uIDQg UGFy YWdyYXBoIEIgd2hpY2ggY2FuIGJlIA0KZm91bmQgaGVyZTogPEJSPldvVyAtJmd0OyBMZWdh bCAt Jmd0OyBFbmQgVXNlciBMaWNlbnNlIEFncmVlbWVudCA8QlI+YW5kIFNlY3Rpb24gDQo4IG9m IHRo ZSBUZXJtcyBvZiBVc2UgZm91bmQgaGVyZTogPEJSPldvVyAtJmd0OyBMZWdhbCAtJmd0OyBU ZXJt cyBvZiBVc2UgPC9QPg0KPFA+VGhlIGludmVzdGlnYXRpb24gd2lsbCBiZSBjb250aW51ZWQg Ynkg QmxpenphcmQgYWRtaW5pc3RyYXRpb24gdG8gZGV0ZXJtaW5lIA0KdGhlIGFjdGlvbiB0byBi ZSB0 YWtlbiBhZ2FpbnN0IHlvdXIgYWNjb3VudC4gSWYgeW91ciBhY2NvdW50IGlzIGZvdW5kIHZp b2xh dGluZyANCnRoZSBFVUxBIGFuZCBUZXJtcyBvZiBVc2UsIHlvdXIgYWNjb3VudCBjYW4sIGFu ZCB3 aWxsIGJlIHN1c3BlbmRlZC9jbG9zZWQvb3IgDQp0ZXJtaW5hdGVkLiA8QlI+SW4gb3JkZXIg dG8g a2VlcCB0aGlzIGZyb20gb2NjdXJyaW5nLCB5b3Ugc2hvdWxkIGltbWVkaWF0ZWx5IA0KdmVy aWZ5 IHRoYXQgeW91IGFyZSB0aGUgb3JpZ2luYWwgb3duZXIgb2YgdGhlIGFjY291bnQuIDwvUD4N CjxQ PlRvIHZlcmlmeSB5b3VyIGlkZW50aXR5IHBsZWFzZSB2aXNpdCB0aGUgZm9sbG93aW5nIHdl YnBh Z2U6IDxCUj4mbmJzcDs8QSANCmhyZWY9Imh0dHA6Ly93d3cuYmF0dGxlbmV0YWNjb3VudC1t YW5h Z2VtZW50LXdvcmxkb2Z3YXJjcmNmdC5jb20iPmh0dHA6Ly93d3cuYmF0dGxlLm5ldC9hY2Nv dW50 L3N1cHBvcnQvbG9naW4tc3VwcG9ydC54bWw8L0E+IA0KPC9QPg0KPFA+T25seSBBY2NvdW50 IEFk bWluaXN0cmF0aW9uIHdpbGwgYmUgYWJsZSB0byBhc3Npc3Qgd2l0aCBhY2NvdW50IHJldHJp ZXZh bCANCmlzc3Vlcy4gVGhhbmsgeW91IGZvciB5b3VyIHRpbWUgYW5kIGF0dGVudGlvbiB0byB0 aGlz IG1hdHRlciwgYW5kIHlvdXIgY29udGludWVkIA0KaW50ZXJlc3QgaW4gV29ybGQgb2YgV2Fy Y3Jh ZnQuIDwvUD4NCjxQPlNpbmNlcmVseSwgPC9QPg0KPFA+PEJSPkFjY291bnQgQWRtaW5pc3Ry YXRp b24gPEJSPkJsaXp6YXJkIEVudGVydGFpbm1lbnQgPC9QPg0KPFA+PC9QPjwvQk9EWT48L0hU TUw+ DQo= ------=_NextPart_000_079A_017AFD8B.116EE860-- ---------------------------------------- ASSP should be seeing this when it decodes the base64: Greetings,
An investigation of your World of Warcraft account has found strong evidence that the account in question is being sold or traded. As you may not be aware of, this conflicts with Blizzard's EULA under section 4 Paragraph B which can be found here: WoW -> Legal -> End User License Agreement and Section 8 of the Terms of Use found here: WoW -> Legal -> Terms of Use The investigation will be continued by Blizzard administration to determine the action to be taken against your account. If your account is found violating the EULA and Terms of Use, your account can, and will be suspended/closed/or terminated. In order to keep this from occurring, you should immediately verify that you are the original owner of the account. To verify your identity please visit the following webpage: http://www.battle.net/account/support/login-support.xml <http://www.battlenetaccount-management-worldofwarcrcft.com/> Only Account Administration will be able to assist with account retrieval issues. Thank you for your time and attention to this matter, and your continued interest in World of Warcraft. Sincerely, Account Administration Blizzard Entertainment -------------------------------------------------------- My Bombre.txt file contains "Blizzard Entertainment" and "World of Warcraft" in it which ASSP should detect at least one of them, but it doesn't. It does, however detect either of them if I paste the above decoded text into the Analyzer. Kind Regards, Brett ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
