How is this getting by?  Full headers & subject follow:

Return-Path:<[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from mail.amfes.com (bubba.amfeslan.local [192.168.0.72])
        by mail.amfes.com (Postfix) with ESMTP id 672F5425AC99
        for<[email protected]>; Mon, 24 Jan 2011 09:31:28 -0800 (PST)
Received: from dukecmmtar03.coxmail.com ([68.99.120.44] 
helo=dukecmmtar03.coxmail.com)
        with IPv4:25 by mail.amfes.com; 24 Jan 2011 09:31:28 -0800
Received: from dukecmimpo02.coxmail.com ([68.99.120.135])
           by dukecmmtar03.coxmail.com
           (InterMail vM.7.08.02.01 201-2186-121-102-20070209) with ESMTP
           
id<20110124173127.qqon10163.dukecmmtar03.coxmail....@dukecmimpo02.coxmail.com>;
           Mon, 24 Jan 2011 12:31:27 -0500
Received: from cfef.net ([98.190.218.44])
        by dukecmimpo02.coxmail.com with bizsmtp
        id zVXQ1f0090y3wyA01VXS17; Mon, 24 Jan 2011 12:31:27 -0500
Received: from User ([115.240.3.9]) by cfef.net with Microsoft 
SMTPSVC(6.0.3790.3959);
         Mon, 24 Jan 2011 12:29:18 -0500
Reply-To:<[email protected]>
From: "UN COMPENSATION"<[email protected]>
Subject: Your Email Account
Date: Mon, 24 Jan 2011 22:59:14 +0530
MIME-Version: 1.0
Content-Type: text/plain;
        charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID:<[email protected]>
X-OriginalArrivalTime: 24 Jan 2011 17:29:19.0168 (UTC) 
FILETIME=[3B4BA400:01CBBBEC]
X-Assp-Version: 1.8.5.1(1.0.05) on mail.amfes.com
X-Assp-Intended-For-IP: 192.168.0.72
X-Assp-Score: -10 (PBwhite)
X-Assp-Delay: [email protected] not delayed (whitebox 68.99.120.44);
        24 Jan 2011 09:31:28 -0800
X-Assp-Score: 50 (Bayesian Probability: 1.0000)
X-Assp-Envelope-From: [email protected]
X-Assp-Intended-For: [email protected]
X-Assp-ID: mail.amfes.com 12958-11506
To: undisclosed-recipients:;

UNITED NATIONS COMPENSATION PAYMENT OFFICE

***

I see the whitebox entry - but shouldn't there have been a check against 
the att.net domain?  Since it looks like the originating server was 
either the cfef.net or coxmail.com?

Then after I send the spam report, my log shows  -
report-body: found address [email protected];
report-body: found address [email protected] in header tag;
report-body: found address [email protected] in header tag;
report-header: found address [email protected] in header tag;
report-body: found address [email protected];
report-body: found address [email protected] in header tag;
report-body: found address [email protected] in header tag;
report-header: found address [email protected] in header tag;

Does the spam report not also have the originating mail server reviewed?

-- 
Daniel
------------------------------------------------------------------------------
Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
Finally, a world-class log management solution at an even better price-free!
Download using promo code Free_Logger_4_Dev2Dev. Offer expires 
February 28th, so secure your free ArcSight Logger TODAY! 
http://p.sf.net/sfu/arcsight-sfd2d
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to