On Sat, 19 Jun 2004, Scott Blomquist wrote:
> Alright, I've had it with these folks. I've been getting MANY of these for the
> last week and nothing is catching them. I've been feeding to Bayes, hence the
> Bayes_90 score but; they're still getting through.
FYI -- that scored 14.8 on my system -- here is the report, may give you an
idea of what rules you need. RBL's are you friend. That one wouldn't have
even made it into our system since it's listed on four of the RBL's we use
at the sendmail level -- njabl, spamhaus, dsbl, and SORBS
14.8/5.0
Content analysis details: (14.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
3.0 SPAMCOP_URI_RBL URI's domain appears in spamcop database at
sc.surbl.org
[yahoo.com-yahoo.com.ph is blacklisted in URI RBL]
[at sc.surbl.org]
1.0 RCVD_IN_OPM RBL: Received via a relay in opm.blitzed.org
[222.108.11.77 listed in opm.blitzed.org]
0.5 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[222.108.11.77 listed in dnsbl.njabl.org]
1.3 RCVD_IN_OPM_SOCKS RBL: OPM: sender is open SOCKS proxy
[222.108.11.77 listed in opm.blitzed.org]
0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
[222.108.11.77 listed in dnsbl.njabl.org]
0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
[222.108.11.77 listed in dnsbl.sorbs.net]
1.2 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server
[222.108.11.77 listed in dnsbl.sorbs.net]
0.7 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[<http://dsbl.org/listing?ip=222.108.11.77>]
1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?222.108.11.77>]
==========================================================
Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816
WestNet Internet Services of Westchester
http://www.westnet.com/
