Hi Darryl
We catch this spam message with 276% of our hold value.
There are a lot of not content based tests that fail this message. This
should be enough to block it.
Our free tool SPAMCHK makes a lot of content based tests. I do not
reccomend to filter this spam by the subject line "he hit me". Doing
this ater some months you will have a long filter list containing
numerous no longer used subject lines.
This message contains a lot of keywords that you can filter for.
Additionaly there are links to external images, and a script call. As
you can se only our SPAMCHK gives 170% of our hold value:
09.03.2003 02:26:44, file C:\IMail\spool\D983f0cc700986457.SMD, Result
0H 50L 120K 0R, total 170
From:lisa <[EMAIL PROTECTED]>
To:<[EMAIL PROTECTED]>
Subject:he hit me
0,11 Filename is C:\IMail\spool\D983f0cc700986457.SMD
0,11 Read 4544 bytes from file C:\IMail\spool\D983f0cc700986457.SMD
0,11 Message is base64 encoded!
0,11 mail text contains links to external images
(http://cmb.flyhosting4free.com/max/images/ltg.jpg)
0,11 mail text contains a script call
(http://cmb.flyhosting4free.com/ltg/?aid=357594)
0,11 Checkwords found: h_ardcore p_enis s_lut c_heck out c_hick p_ics
f_riend t_een s_lut y_our p_enis
Markus
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Darryl Koster
> Sent: Sunday, March 09, 2003 7:47 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Removing mails by the subject
>
>
>
> They fail a bunch of tests on my system. I am still in the
> set up phases though and am looking into dif. possible fixes
> for this type of thing. Its nice to know that I can filter
> for certain words.
>
> Darryl
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Smart
> Business Lists
> Sent: Sunday, March 09, 2003 1:29 PM
> To: Darryl Koster
> Subject: Re: [Declude.JunkMail] Removing mails by the subject
>
>
> Darryl,
>
> Sunday, March 9, 2003 you wrote:
> DK> I get tons that say
> DK> "He Hit Me" that are porn etc.
>
> I've seen a bunch of those recently but they've failed the
> following tests on my system:
>
> OSSOFT, SPAMCOP, WIREHUB-DNSBL, DORKZTL,
> SBL, SORBS-HTTP, CN-KR,
> NOABUSE, NOPOSTMASTER, BADHEADERS, REVDNS,
> SNIFFER
>
>
> Terry Fritts
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
