Ben Lentz wrote:
> Has anyone been able to come up with a safe solution to this morning's
> rash of Joe Blow wrote: spam messages? They look like this:
>
> These aren't really triggering a high enough point value. I've run
> sa-update and these still seem to be coming through.
Are you running network tests? I got one of these 2 minutes ago, and it
scored a 6.8 just from the RBL checks. And once it shows up in the
Razor2 database, it'll score even higher.
Content analysis details: (6.8 points, 3.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
[67.10.183.27 listed in dnsbl.sorbs.net]
3.1 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[67.10.183.27 listed in
sbl-xbl.spamhaus.org]
1.7 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[67.10.183.27 listed in combined.njabl.org]
