Has anyone already made a rule for these? (See attachments for
two spam-samples)
Excerp from one (btw, how can you safely whitelist emails on this
mailing list? Has such rules ever been abused?)
Plus: [EMAIL PROTECTED], Bu'[EMAIL PROTECTED], Ad|p.&x, I0nam.|n, M3ridi'a,
X.3nica|, Am`bi3n,
S0n'aTa, Fl3xe'ril, Ce|3b:rex, F`i0ric3t, [EMAIL PROTECTED]:|, U, L3v`|tra,
P:r0p3cia, Acyc|0vi'r, [EMAIL PROTECTED]
-Frank.
From [EMAIL PROTECTED] Fri Feb 13 02:17:32 2004
Received: from frod-d9ba1946.pool.mediaways.net (|gnj|[EMAIL PROTECTED]
[217.186.25.70])
by xxxx.xxx.xx (8.11.6/8.11.1) with SMTP id i1D1HLW00951;
Fri, 13 Feb 2004 02:17:22 +0100
Received: from 97.137.230.61 by 217.186.25.70; Thu, 12 Feb 2004 08:12:05 -0500
Message-ID: <[EMAIL PROTECTED]>
From: "marin dotson" <[EMAIL PROTECTED]>
Reply-To: "marin dotson" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: FWD: All Drugs Stocked. .Valium. ' _XANAX_ + [EMAIL PROTECTED] -
At|:[EMAIL PROTECTED] ? Pntermi.n. ~ Som:a: XNj8X
Date: Thu, 12 Feb 2004 10:09:05 -0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--454474079060766"
X-Mailer: AT&T Message Center Version 1 (Nov 5 2002)
X-IP: 128.12.39.76
X-Priority: 5
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on xxxx.xxx.xx
X-Spam-Level:
X-Spam-Status: No, hits=0.6 required=3.0 tests=BAYES_50,BIZ_TLD,HTML_50_60,
HTML_MESSAGE,MIME_HTML_ONLY autolearn=no version=2.63
Status: RO
X-Status:
X-Keywords:
----454474079060766
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html public "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www=
.w3.org/TR/html4/loose.dtd">
<HTML>
<HEAD>
<TITLE>All Your Meds Here</TITLE>
<META http-equiv=3D"Content-type" content=3D"text/html; charset=3DISO-8859=
-1">
<STYLE type=3D"text/css">
<!-- .style5 {font-family: Arial, Helvetica, sans-serif; font-size: 14px; =
}
<!-- .style8 {font-family: Arial, Helvetica, sans-serif; font-size: 8px; }=
--></STYLE>
</HEAD>
<BODY>
<table width=3D"500" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
<tr>
<td>
<div class=3D"style5">
We are your online source for obtaining original
branded prescription m=
edications and works in partnership with the leaders in licensed wholesale=
drug sales and dispensing.
<p>
Always Available: ' Pnt.e.rmin # v|@GRA + Vali:u:m %
XA+n+ax ~ :Soma: ,=
A:t|[EMAIL PROTECTED]
<p>
Plus: L3v'|tra, Pr0:p3cia, Acyc|0v:ir, [EMAIL
PROTECTED], [EMAIL PROTECTED], Bu:[EMAIL PROTECTED], Ad|p`e=
x, I0nam|`n, M3:ridia, X3n:ica|, Ambi.3n, S0naT:a, Fl3xe.ril, Ce|`3brex, F=
i0r.ic3t, T'[EMAIL PROTECTED]|, U`|[EMAIL PROTECTED]
<p>
We offer you a choice of original and generic
medications.
<p>
<a href=3D"http://www.preferredrx.biz";>Enjoy deep
discount meds here.</=
a>
</div>
</td>
</tr>
</table>
</align></complementary></chlorine></wise></novice></plume>
</stern></whisper></chunky></crossover></inoffensive></shell>
</ceq></backstop></concise></agatha></filmmake></decorticate>
</BODY>
</HTML>
----454474079060766--
From [EMAIL PROTECTED] Fri Feb 13 09:06:58 2004
Received: from cm600-lflo1-27-12.cm.vtr.net (CM600-lflo1-27-12.cm.vtr.net
[200.104.27.12])
by xxxx.xxx.xx (8.11.6/8.11.1) with SMTP id i1D86fW08194;
Fri, 13 Feb 2004 09:06:43 +0100
Received: from 127.250.196.222 by 200.104.27.12; Thu, 12 Feb 2004 19:03:24 -0100
Message-ID: <[EMAIL PROTECTED]>
From: "evalyn pollack" <[EMAIL PROTECTED]>
Reply-To: "evalyn pollack" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED]
Subject: FWD: All On Stocks. v1aGR@ + Vali+u+m > [EMAIL PROTECTED] . At|v@'n =
S0ma > Pn:t:ermin ukjc7
Date: Thu, 12 Feb 2004 23:01:24 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--93315313357516496"
X-Mailer: Chameleon ATX 6.0.1, Standards Based IntraNet Solutions, NetManage
Inc.
X-Webmail-Time: Thu, 12 Feb 2004 15:56:24 -0400
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on xxxx.xxx.xx
X-Spam-Level: **
X-Spam-Status: No, hits=2.9 required=3.0 tests=BAYES_70,BIZ_TLD,HTML_50_60,
HTML_MESSAGE,MIME_HTML_ONLY autolearn=no version=2.63
Status: RO
X-Status:
X-Keywords:
----93315313357516496
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html public "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www=
.w3.org/TR/html4/loose.dtd">
<HTML>
<HEAD>
<TITLE>All Your Meds Here</TITLE>
<META http-equiv=3D"Content-type" content=3D"text/html; charset=3DISO-8859=
-1">
<STYLE type=3D"text/css">
<!-- .style5 {font-family: Arial, Helvetica, sans-serif; font-size: 14px; =
}
<!-- .style8 {font-family: Arial, Helvetica, sans-serif; font-size: 8px; }=
--></STYLE>
</HEAD>
<BODY>
<table width=3D"500" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
<tr>
<td>
<div class=3D"style5">
You too can now enjoy the same deep discounts offered
to US residents b=
y ordering your prescriptions directly from us.
<p>
Quality Meds we offer: =3D Pn.t.ermin ; [EMAIL
PROTECTED] $ [EMAIL PROTECTED]|um < XA+n+ax ) So:=
m:a - At|:[EMAIL PROTECTED]
<p>
Plus: [EMAIL PROTECTED], Bu'[EMAIL PROTECTED], Ad|p.&x,
I0nam.|n, M3ridi'a, X.3nica|, Am`bi3n, =
S0n'aTa, Fl3xe'ril, Ce|3b:rex, F`i0ric3t, [EMAIL PROTECTED]:|, U, L3v`|tra,
P:r0p3ci=
a, Acyc|0vi'r, [EMAIL PROTECTED]
<p>
We fully comply with International law re: controlled
drugs.
<p>
<a href=3D"http://www.preferredrx.biz";>Enjoy deep
discount meds here.</=
a>
</div>
</td>
</tr>
</table>
</inapplicable></methionine></strive></belladonna></atlas></visa>
</preparatory></negate></aside></cowgirl></pitney></scraggly>
</straightforward></therapy></cotoneaster></miscegenation></scarves></theo=
rem>
</BODY>
</HTML>
----93315313357516496--
