If you are running the 70_SARE_HTML1.CF file, increase the value of SARE_HTML_A_HIDE in your local.cf... this spammer always hits this rule. I've been doing this for several months now, with no false positives. I've set mine to 3 points (5 required).
HTH, Shawn -----Original Message----- From: Matt [mailto:[EMAIL PROTECTED] Sent: Monday, February 28, 2005 8:23 AM To: [EMAIL PROTECTED] Subject: Porn E-Mail Has anyone noticed lately a higher then normal amount of porn spam getting through? I've seen alot of it that seems to be hitting the customer base as of late.. marked only by the SURBL... but those that aren't SURBLed yet.. get through with a score of like 2.3 Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: (qmail 8629 invoked by uid 509); 26 Feb 2005 15:18:08 -0000 Received: from 220.104.187.146 by smtp4-ha.chilitech.net (envelope-from <[EMAIL PROTECTED]>, uid 503) with qmail-scanner-1.23 (spamassassin: 2.64. Clear:RC:0(220.104.187.146):SA:0(2.1/4.5):. Processed in 5.891302 secs); 26 Feb 2005 15:18:08 -0000 X-Spam-Status: No, hits=2.1 required=4.5 X-Spam-Level: ++ Received: from p7146-ipad04yosida.nagano.ocn.ne.jp ([220.104.187.146]) (envelope-sender <[EMAIL PROTECTED]>) by 0 (qmail-ldap-1.03) with SMTP for <[EMAIL PROTECTED]>; 26 Feb 2005 15:18:02 -0000 Received: from frxsgmnq.area.trieste.it (mail2.area.trieste.it [151.11.128.151]) by p7146-ipad04yosida.nagano.ocn.ne.jp with esmtp id 98CA9A8736 for <[EMAIL PROTECTED]>; Sat, 26 Feb 2005 07:17:59 -0800 Message-ID: <[EMAIL PROTECTED]> From: "Lithest T. Helper" <[EMAIL PROTECTED]> To: Adelewilcox <[EMAIL PROTECTED]> Subject: Excuse me... :) Date: Sat, 26 Feb 2005 07:17:59 -0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0011_582242D6.106C5F2A" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1437 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-RAV-Antivirus: This e-mail has been scanned for viruses on host: p7146-ipad04yosida.nagano.ocn.ne.jp This is a multi-part message in MIME format. ------=_NextPart_000_0011_582242D6.106C5F2A Content-Type: text/plain Content-Transfer-Encoding: 7bit Well well well! http://kytheras.com/b245de2dbd2efe9e06d1a822a/BwYLPwsQDg4FDRYTDQ8ODg8WCzAGSQkHEg==.htm Oversleeping will never make one's dreams come true. Shalai po http://kytheras.com/b245de2dbd2efe9e06d1a822a/BwYLPwsQDg4FDRYTDQ8ODg8WCzAGSQkHEg==.html ------=_NextPart_000_0011_582242D6.106C5F2A Content-Type: text/html Content-Transfer-Encoding: quoted-printable <META HTTP-EQUIV=3d"Content-Type" CONTENT=3d"text/html;charset=3diso-8859-1"> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4=2e0 Transitional//EN"> <HTML><HEAD> <META HTTP-EQUIV=3d"Content-Type" CONTENT=3d"text/html; charset=3dus-ascii"> <META content=3d"MSHTML 6=2e00=2e2800=2e1437" name=3dGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3d#ffffff> <DIV> How're you doing?<BR><BR><A=20 href=3d"http://kytheras=2ecom/b245de2dbd2efe9e06d1a822a/BwYLPwsQDg4FDRYTDQ8ODg8WCzAGSQkHEg=3d=3d=2ehtm"; target=3d"ensemble"> <br><br><IMG src=3d"http://kytheras=2ecom/b245de2dbd2efe9e06d1a822a/ZVXw/BdqV=2ejpeg"; alt=3d"mundanes" border=3d'0'><BR><IMG src=3d"http://kytheras=2ecom/b245de2dbd2efe9e06d1a822a/BwYLPwsQDg4FDRYTDQ8ODg8WCzAGSQkHEg=3d=3d=2ejpg"; border=3d'0'><BR><IMG src=3d"http://kytheras=2ecom/b245de2dbd2efe9e06d1a822a/TWRXIoLhNa/HJb5FTKL/ccc6dWo=2egif"; border=3d0><BR></A>Khudaa haafizWarayna I have a feeling this is destiny=2e [On the eve of her third marriage] Man in general, if reduced to himself, is too wicked to be free=2e<BR><BR>Remember, every time you open your mouth to talk, your mind walks out and parades up and down the words=2eThe most splendid achievement of all is the constant striving to surpass yourself and to be worthy of your own approval=2eThere are only two ways of getting on in the world: by one's own industry, or by the stupidity of others=2e <br>A lot of good arguments are spoiled by some fool who knows what he is talking about=2e<br>It is always sound business to take any obtainable net gain, at any cost and at any risk to the rest of the community=2e There is a time to take counsel of your fears, and there is a time to never listen to your fear=2e<BR>Don't change horses while crossing a stream=2e<BR><BR>I dream of you to wake would that I might Dream of you and not wake but slumber on=2e=2e=2e<br><br>Some of these people need ten years of therapy --ten sentences of mine do not equal ten years of therapy=2e <br>No great thing is created suddenly=2e<BR>Shelving hard decisions is the least ethical course=2e <BR><BR>Read nothing that you do not care to remember, and remember nothing you do not mean to use=2e <br><br>Perhaps all artists were, in a sense, housewives: tenders of the earth household=2eThe noblest search is the search for excellence=2e<br><br>Comedy is simply a funny way of being serious=2eThe construction of life is at present in the power of facts far more than convictions=2e <br><A href=3d"http://kytheras=2ecom/b245de2dbd2efe9e06d1a822a/oWenQK=2ehtml"; target=3d"heartbeat"><IMG src=3d"http://kytheras=2ecom/b245de2dbd2efe9e06d1a822a/nb0=2egif"; border=3d0> </A></DIV></BODY></HTML> ------=_NextPart_000_0011_582242D6.106C5F2A--
