Matt,
Great job on the filters...Thanks.
Here is one in it's entirety from one of my spamtraps, only the names have
been changed to protect my 'honeypot'.
Fritz
Frederick P. Squib, Jr.
Network Operations/Mail Administrator
Citizens Telephone Company of Kecksburg
http://www.wpa.net
() ascii ribbon campaign - against html mail
/\ - against microsoft attachments
------------------------------------------------------------
Received: from mail2.wpa.net [208.31.212.41] by wpa.net with ESMTP
(SMTPD32-7.15) id A7B93430116; Mon, 10 Nov 2003 19:05:13 -0500
Received: from 208.31.212.41 [165.98.151.196] by mail2.wpa.net
(SMTPD32-7.15) id A6DB2DA30090; Mon, 10 Nov 2003 19:01:31 -0500
Received: from 108.66.128.147 by 165.98.151.196; Mon, 10 Nov 2003 10:01:28 -0200
Message-ID: <[EMAIL PROTECTED]>
From: "Whitley" <[EMAIL PROTECTED]>
Reply-To: "Mike Whitley" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: [W~ 58]Re: %RND_UC_CHAR[2-8], that's all well
Date: Mon, 10 Nov 2003 15:05:28 +0300
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--64088188390659958926"
X-Priority: 1
X-MSMail-Priority: High
X-RBL-Warning: COUNTRY: Message failed COUNTRY test (167)
X-RBL-Warning: FILTER-HELO: Message failed FILTER-HELO test (2)
X-RBL-Warning: FILTER-SUBJECT: Message failed FILTER-SUBJECT test (10)
X-RBL-Warning: SPAMDOMAINS: Spamdomain 'yahoo.' found: Address of [EMAIL PROTECTED]
sent from invalid [No Reverse DNS].
X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED]
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 165.98.151.196 with no
reverse DNS entry.
X-RBL-Warning: SPAMCHECK: Message failed SPAMCHECK: 2.
X-RBL-Warning: WEIGHT30: Weight of 58 reaches or exceeds the limit of 32.
X-Declude-Sender: [EMAIL PROTECTED] [165.98.151.196]
X-Declude-Spoolname: D27b9034301169884.SMD
X-Note: This E-Mail was scanned by Declude JunkMail v1.76i15 for spam.
X-Spam-Tests-Failed: COUNTRY, FILTER-HELO, FILTER-SUBJECT, SPAMDOMAINS,
NOLEGITCONTENT, NOABUSE, IPNOTINMX, REVDNS, REVDNSa, SPAMCHECK, WEIGHT20, WEIGHT30
X-Country-Chain: [IANA Reserved]->NICARAGUA->UNITED STATES->destination.
X-Hello: 208.31.212.41
X-Note: SMTP Real From [EMAIL PROTECTED]
X-Note: This E-mail was sent from [No Reverse DNS] ([165.98.151.196]).
X-Note: Total spam weight of this E-mail is 58.
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 344048811
----64088188390659958926
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dwindows-12=
51">
<META content=3D"MSHTML 6.00.2800.1141" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<font color=3D"white">derision brushfire perez papa indiscriminate bail ed=
ict asparagine pixy perjure council citywide cutlet amaze katharine eavesd=
ropper pedestrian confirmatory bragg cheerleader baldpate=20</font><br>
<body>
<p>Th</antimony>e ul</taft>timate d</gnat>igital
ca</sistine>ble f</delegate>ilter</p>
<p>Th</truncate>e fil</revert>ter wi</hornblower>ll al</bundle>low
yo</ellsworth>u t</chrysolite>o rec</healthful>eive a</miltonic>ll
t</bicep>he ch</dromedary>annels t</vegetate>hat y</emigrant>ou
or</eeoc>der wi</surgery>th y</septum>our r</kick>emove
cont</rosen>rol!</p>
<p>pay</chapter>perviews, adu</manchester>lt mov</gusto>ies,s</tedious>por=
t
even</safe>ts,s</mizar>pecial ev</slaughter>ents!
<a href=3D"http://www.inkworlds.com/cable/";>
se</everything>e n</neuroses>ow!</a></p><p><a href=3D"http://www.inkworlds=
com/cable/">
<img %RANDOM_TEXT border=3D"0" src=3D"http://www.creditcard2003.com/=
%CUSTOM2_"></a></p>
<br>
<font color=3D"white">conquistador decorum streamline sunfish shepherd mor=
phemic snakelike flatus allay extolled apology bowie eccles replica bluebu=
sh apprehend bin kurt caret=20</font>
</BODY>
</HTML>
----64088188390659958926--
---
[This E-mail scanned by Citizens Internet Services with Declude Virus.]
