[SAtalk] Another sneaky spam; anyone got a filter to snag this one?

Rubin Bennett Mon, 15 Dec 2003 16:53:22 -0800

Actually, it looks like I've got a config problem:  When I saved this
email to disk and ran it as my username on the mailserver, it scored
15.3 points.  When I ran it through spamc as root, it got 9.6.  Yet, the
first time it came through, it scored a measley 3.7 points!  What
gives?  Have I managed to zork something in my configuration?


Jeeze; spammers give me a headache.

Rubin
-- 
Rubin Bennett <[EMAIL PROTECTED]>
RB Technologies

From [EMAIL PROTECTED] Mon Dec 15 16:51:38 2003
Return-Path: <[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (localhost.localdomain [127.0.0.1]) by
        tux.thatitguy.com (Postfix) with ESMTP id 8015355F07 for
        <[EMAIL PROTECTED]>; Mon, 15 Dec 2003 16:51:38 -0500 (EST)
Received: from morpheus.thatitguy.com [216.204.165.33] by localhost with
        POP3 (fetchmail-6.2.4) for [EMAIL PROTECTED] (single-drop); Mon, 15 Dec
        2003 16:51:38 -0500 (EST)
Received: from email2me.net ([218.81.183.216]) by morpheus.thatitguy.com
        (8.12.9-20030917/8.12.9) with SMTP id hBFLtZCd027755; Mon, 15 Dec 2003
        16:55:45 -0500
Message-ID: <[EMAIL PROTECTED]>
Reply-To: "erik tschannen" <[EMAIL PROTECTED]>
From: "erik tschannen" <[EMAIL PROTECTED]>
To: "hayden mannino" <[EMAIL PROTECTED]>
Cc: "justin bromley" <[EMAIL PROTECTED]>
Subject: Collection DepartmentIqqg
Date: Tue, 16 Dec 2003 06:12:45 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative; 
boundary="----=_NextPart_796_7B27_4583EF96.82429E75"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Spam-Level: ***
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on 
        tux.thatitguy.com
X-Spam-Status: No, hits=3.7 required=5.0 tests=HTML_70_80,
        HTML_FONTCOLOR_UNSAFE,HTML_FONT_BIG,HTML_MESSAGE,MIME_BASE64_LATIN,
        MIME_BASE64_TEXT,MIME_HTML_MOSTLY autolearn=no version=2.60
X-Evolution-Source: imap://[EMAIL PROTECTED]/

This is a multi-part message in MIME format.

------=_NextPart_796_7B27_4583EF96.82429E75
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit


------=_NextPart_796_7B27_4583EF96.82429E75
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1106" name=GENERATOR>
<STYLE></STYLE>
</HEAD><FONT face=Arial><FONT size=2>
<BODY>
<DIV>s<SPAN>r kdw </SPAN>p<U>b</U> chpj plylt<S>h</S>q.
<p><font color="#FDFFF7">g<S>y</S>g  toarbxb<SPAN> of  nkd</SPAN>as</font><br>
<div align="center"><font face="Arial, Helvetica, sans-serif" size="4" 
color="#999999">Wh<wtciiodibura>y 
  don't <SPAN>you </SPAN>ch</lejfinplpm>ange your li<SPAN>fe and</SPAN> B<qealhqr>id 
for your new Mo</xtylyfpiyaclx>ney in @<cvynescan>uctions </font><font face="Arial, 
Helvetica, sans-serif" size="4"><br>
  <font color="#FDFFF7">wtw  df<I>h</I>jwv hk  ctj</font><br>
  <a 
href="http://www.tiq.com.x.net.youcouldbenefitttfromthis.pro.br/ada/adl/";>H<ecdulq>i<bkmbfouyf>t
 H<rgamrrgj>ere</a> <br>
  <font color="#FDFFF7">pa  aqjy<FONT face=Tahoma>b </FONT>nur  
nyht<STRIKE>y</STRIKE>ut</font><br>
  <font color="#660099">You can st<pxloiwas>art ma<aghsciehhj>king 
<STRONG>y</STRONG>our e<pwbgbaiqryr>bay @<mokwlgtspghi>uctions a real 
pro<itdoahthvig>fita<svsiupnlu>ble 
  ac<bsdwqetrn>tivity! </font><br>
<font color="#FDFFF7">bci  lh ttk  rr<SPAN>c</SPAN>u</font><br>  
</font><font face="Arial, Helvetica, sans-serif" size="4"> <font color="#FDFFF7">uq  
xu mn  xmckitn</font></font> 
  </font></font></div>
<p>&nbsp;</p>  D<pcriio>ro<noatthfiwamgg>p ser<pygyhr>vice ava<xwgaxjrbk>ilable at 
we<ojtdtb>bsite </font></b></p>
<p>&nbsp;</p>
A wander<SPAN>er wh</SPAN>o is de<FONT color=#74ab30>te</FONT>rmined to reach 
h<SPAN>is </SPAN>destination<I> d</I>oes not f<STRIKE>e</STRIKE>ar the rain. 
qa 11hgt19<STRIKE>i</STRIKE>t,ov pq 
m<SPAN>wssmlowad</SPAN>.</DIV></BODY></HTML></FONT></FONT>
------=_NextPart_796_7B27_4583EF96.82429E75--

signature.asc
Description: This is a digitally signed message part

[SAtalk] Another sneaky spam; anyone got a filter to snag this one?

Reply via email to