"Paweł Tęcza" <[EMAIL PROTECTED]> writes:
[...]
> Here are the Spamassassin headers for one of a spam mail we received:
Ups! It was spam received when we disabled Bayes. Below are spam
headers we scanned before:
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.1 (2007-05-02) on
anubis4.poczta.uw.edu.pl
X-Spam-Level: xxxxxxxxxxxxxxxxxxxxx
X-Spam-Status: Yes, score=21.5 required=5.0
tests=AXB_XMID_1212,BAYES_99,
FH_HELO_EQ_D_D_D_D,FRT_PRICE,FRT_STRONG1,HELO_DYNAMIC_IPADDR,RCVD_IN_PBL,
RCVD_IN_SORBS_DUL,RDNS_DYNAMIC,STOX_REPLY_TYPE,TVD_STOCK1
autolearn=spam
version=3.2.1
X-Spam-Report: =?ISO-8859-1?Q?
* 3.5 BAYES_99 BODY: Bayesowskie prawdopodobie=f1stwo spamu
wynosi 99 do
* 100%
* [score: 1.0000]
* 0.0 STOX_REPLY_TYPE STOX_REPLY_TYPE
* 0.0 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d
* 2.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious
hostname (IP addr
* 1)
* 3.5 AXB_XMID_1212 Barbera Fingerprint
* 0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
* [90.14.168.63 listed in zen.spamhaus.org]
* 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic
IP address
* [90.14.168.63 listed in dnsbl.sorbs.net]
* 3.5 FRT_PRICE BODY: ReplaceTags: Price
* 3.0 FRT_STRONG1 BODY: ReplaceTags: Strong (1)
* 3.8 TVD_STOCK1 BODY: TVD_STOCK1
* 0.1 RDNS_DYNAMIC Delivered to trusted network by host with
* dynamic-looking rDNS?=
What can you tell about it now? :)
Regards,
Pawel
