Oh, I should have added: Don't expect the Habeas HIL ip4r blacklist to help with this type of misuse; their "whole deal" makes them cautious about creating entries only after negotiation fails.
The HIL ip4r is meant to blacklist the IP of an offending SpamHaus, not a zombie or small time spammer on his own broadband box at home. Andrew 8) -----Original Message----- From: Colbeck, Andrew Sent: Sunday, January 11, 2004 1:21 PM To: '[EMAIL PROTECTED]' Subject: [Declude.JunkMail] Zombie Habeas offender I've reported this e-mail to SpamCop and Habeas. It's a matter of some supposition as to which of the fake headers were inserted by which software. I'm posting this as a warning because: a) My Declude JunkMail Pro text filter to negatively weight Habeas header text was too heavy, b) exemptions.ahbl.org was (but is no longer) listing this obvious client IP in their whitelist. YMMV... Andrew 8) Header of offending message follows. I'm not bothering with the rest because it's the usual Chinese pharmacy ad you've all seen before. --------- Received: from cpe-069-132-166-023.carolina.rr.com [69.132.166.23] by mail.bentall.com (SMTPD32-8.05) id A3A81B34009E; Sun, 11 Jan 2004 12:35:52 -0800 Received: from 1.215.94.195 by 69.132.166.23; Sun, 11 Jan 2004 14:33:10 -0300 Message-ID: <[EMAIL PROTECTED]> X-Habeas-SWE-1: winter into spring X-Habeas-SWE-2: brightly anticipated X-Habeas-SWE-3: like Habeas SWE (tm) X-Habeas-SWE-4: Copyright 2002 Habeas (tm) X-Habeas-SWE-5: Sender Warranted Email (SWE) (tm). The sender of this X-Habeas-SWE-6: email in exchange for a license for this Habeas X-Habeas-SWE-7: warrant mark warrants that this is a Habeas Compliant X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this X-Habeas-SWE-9: mark in spam to <http://www.habeas.com/report/>. From: "Rafael G. Goins" <[EMAIL PROTECTED]> Reply-To: "Rafael G. Goins" <[EMAIL PROTECTED]> To: snip Cc: snip, snip, snip Subject: Fwd: Get All Meds. V|@gra, Val�(u)m, X(a)[EMAIL PROTECTED] Diet Pills GqnKbs Date: Sun, 11 Jan 2004 13:27:10 -0400 X-Mailer: Pegasus Mail for Win32 (v3.12cDE) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPartTM-000-6f074a8d-894c-4d83-8f7e-1613ba3b2f78" X-Priority: 5 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
