Lots of "real" spam doesn't score this high. 22.9 points
on SA 3.0.4. Someone's zombie ratware misfired. Is this some
record for points per line - infinite. The only change was to
substitute {VICTIM} for the actual account.
Paul Shupak
[EMAIL PROTECTED]
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 NO_REAL_NAME From: does not include a real name
1.3 UNDISC_RECIPS Valid-looking To "undisclosed-recipients"
3.5 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2)
3.7 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC)
0.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
3.1 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[24.158.36.57 listed in sbl-xbl.spamhaus.org]
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[24.158.36.57 listed in dnsbl.sorbs.net]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?24.158.36.57>]
1.6 DNS_FROM_RFC_POST RBL: Envelope sender in postmaster.rfc-ignorant.org
0.1 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[24.158.36.57 listed in combined.njabl.org]
1.2 MISSING_SUBJECT Missing Subject: header
1.1 INVALID_MSGID Message-Id is not valid, according to RFC 2822
--------------------------------------------------------------------------------
-- Complete header *and* body of blank spam ------------------------------------
--------------------------------------------------------------------------------
Return-Path: <[EMAIL PROTECTED]>
Received: from 24-158-36-057.dhcp.hckr.nc.charter.com
(24-158-36-057.dhcp.hckr.nc.charter.com [24.158.36.57])
by mailhub.plectere.com (Postfix) with SMTP id D8D776E94
for <[EMAIL PROTECTED]>; Thu, 17 Nov 2005 06:26:02 -0800 (PST)
Received: (from apache@)
by ..com (6.13.0/8.12.4/Submit) id j31CkQBj505121;
Thu, 17 Nov 2005 20:18:07 +0600
Date: Thu, 17 Nov 2005 11:20:07 -0300
Message-Id: <9[3
From: [EMAIL PROTECTED]
To: undisclosed-recipients:;
