I'm getting rather irritated with this one. We're getting spam which
contains only one line:
img src=cid:1dd0fa2ddee584b7e4937d9e77a06d69
Is there some way to make a filter where if img src=cid is found on the
first line then set a weight?
No legitimate email should ever contain only the one
Beckstrom
Sent: Sunday, December 18, 2005 7:02 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Nasty Spammer
I'm getting rather irritated with this one. We're getting
spam which contains only one line:
img src=cid:1dd0fa2ddee584b7e4937d9e77a06d69
Is there some way
is always failing CMDSPACE and in this case also SNIFFER-GENERAL
Markus
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave
Beckstrom
Sent: Sunday, December 18, 2005 7:02 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Nasty
We're receiving spam where the Ad graphic states its QuoteAMinute.com but
the domain referenced in the link is one of the following:
lainsnow.com
laquickquotes.com
lahealthinstogo.com
lahotquotes.com
lahealthsite.com
The mail is failing sniffer but apparently not failing invURIBL. Its
scoring
Try senderbase http://tinyurl.com/7j7fy
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave
Beckstrom
Sent: Wednesday, November 02, 2005 10:08 AM
To: Declude.JunkMail@declude.com
Subject: [W~ 29][Declude.JunkMail] Nasty Spammer
We're
Dave,
I checked those domains and they are now all listed in SURBL. I am also
seeing them picked up now as well on my system.
2005-11-02 05:52:00.421 2005-11-02 05:52:00.500
x:\IMail\spool\proc\work\D9a47e5b202722cef.smd laqui
om 127.0.0.20 URI from message body found in multi.surbl.org
