Re: [SAtalk] New Spam Source? Rules for this yet??

Tue, 11 Nov 2003 15:20:25 -0800

Robert Leonard III wrote:

I have been getting several new spams that seem to get past my SA setup..

So far they have come from:
@name-james.com
@name-clark.com
@smegheads.com

They all have wording like..  but with minor variations..  anybody else
seeing these/written any rules to stop these??


Oh, I've been getting those for a while. Those are about the *only* things that slip through. Here's another example (And no, I didn't change the subject.. heh)
"usedviper.com" pops up occasionally.

-----

Return-Path: <[EMAIL PROTECTED]>
Received: from mailgate.pbp.net (mailgate.pbp.net [192.168.10.87])
        by mail.pbp.net (Postfix) with ESMTP id 1C1F7154FE
        for <[EMAIL PROTECTED]>; Sun,  9 Nov 2003 18:38:58 -0800 (PST)
Received: from localhost (unknown [127.0.0.1])
        by mailgate.pbp.net (Postfix) with ESMTP id 0A00CB4021
        for <[EMAIL PROTECTED]>; Mon, 10 Nov 2003 02:38:58 +0000 (UTC)
Received: from kp4.usedviper.com (kp4.usedviper.com [203.192.162.203])
        by mailgate.pbp.net (Postfix) with ESMTP id 3563C8DD11
        for <[EMAIL PROTECTED]>; Sun,  9 Nov 2003 18:38:52 -0800 (PST)
From: "Jordan" <[EMAIL PROTECTED]>
Message-Id: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Rush is a fat fuck
Date: Sun, 9 Nov 2003 18:35:34 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_65F1_7EF1C4EA.17426B3F"
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
        mailgate.pbp.net
X-Spam-Level: **
X-Spam-Status: No, hits=2.5 required=5.0 tests=BAYES_70,HTML_50_60,
        HTML_MESSAGE autolearn=no version=2.60
X-Virus-Scanned: by AMaViS 0.3.12

This is a multi-part message in MIME format.

------=_NextPart_000_65F1_7EF1C4EA.17426B3F
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: 7bit


How are you?
&nbsp;
trust you receive this note by now.Here's the place:
&nbsp;
http://www4.smegheads.com/b7/index.html
&nbsp;
I found they have hard-on medicine for not much at all.Don't know how they do it.If you work it out explain it:)
&nbsp;
Bye,
&nbsp;
Jordan.
&nbsp;
http://www1.name-davis.com/off.html
&nbsp;

------=_NextPart_000_65F1_7EF1C4EA.17426B3F
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML>
<HEAD>

<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="MSHTML 5.00.3516.2800" name=GENERATOR>
<STYLE>
</STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV>
<FONT face=Arial size=2>How are you?</FONT>
</DIV>
<DIV>&nbsp;</DIV>
<DIV>
<FONT face=Arial size=2>trust you receive this note by now.Here's the place:</FONT>
</DIV>

<DIV>&nbsp;</DIV>
<DIV>
<FONT face=Arial size=2>
<A href="http://www2.smegheads.com/b7/index.html";>http://www4.smegheads.com/b7/index.html</A>
</FONT>
</DIV>
<DIV>&nbsp;</DIV>
<DIV>
<FONT face=Arial size=2>I found they have hard-on medicine for not much at all.Don't know how they do it.If you work it out explain it:)</FONT>
</DIV>
<DIV>&nbsp;</DIV>

<DIV>
<FONT face=Arial size=2>Bye,</FONT>
</DIV>
<DIV>&nbsp;</DIV>
<DIV>
<FONT face=Arial size=2>Jordan.</FONT>
</DIV>
<DIV>&nbsp;</DIV>
<DIV>
<FONT face=Arial size=2>
<A href="http://www3.name-davis.com/off.html";>http://www1.name-davis.com/off.html</A>

</FONT>
</DIV>
<DIV>&nbsp;</DIV>
<DIV>
</BODY>
</HTML>

------=_NextPart_000_65F1_7EF1C4EA.17426B3F--






-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to