You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Tarak Ranjan <co...@yahoo.co.in> on 2008/02/26 13:15:20 UTC
Lots Of SPAM
Hi List,
i have posted my RAW email in http://pastebin.ca/918849 ,
i'm receiving 1000 to 4000 per day this king of mesages.
SA also skipping this kind of mails....
/
TArak
Re: Lots Of SPAM
Posted by Loren Wilton <lw...@earthlink.net>.
> Hi List,
> i have posted my RAW email in http://pastebin.ca/918849 ,
> i'm receiving 1000 to 4000 per day this king of mesages.
> SA also skipping this kind of mails....
"Nice girl" spam. Look in the archives over the last week, those were
discussed a lot and several rules posted for them.
Loren
Re: Lots Of SPAM
Posted by Chris <cp...@embarqmail.com>.
On Tuesday 26 February 2008 6:15 am, Tarak Ranjan wrote:
> Hi List,
> i have posted my RAW email in http://pastebin.ca/918849 ,
> i'm receiving 1000 to 4000 per day this king of mesages.
> SA also skipping this kind of mails....
>
> /
> TArak
Here's how my box scored it:
Content analysis details: (36.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
5.0 BOTNET Relay might be a spambot or virusbot
[botnet0.8,ip=121.23.229.225,maildomain=adesso.de,nordns]
4.5 LOGINHASH BODY: iXhash says its spam
2.5 IXHASH BODY: iXhash says its spam
2.5 LOGINHASH2 BODY: iXhash says its spam
3.7 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
2.2 DCC_CHECK listed in DCC (http://rhyolite.com/anti-spam/dcc/)
[cpollock 1117; Body=3 Fuz1=3 Fuz2=many]
10 CLAMAV Clam AntiVirus detected a virus
0.0 DIGEST_MULTIPLE Message hits more than one network digest check
0.1 RDNS_NONE Delivered to trusted network by a host with no
rDNS
1.0 SAGREY Adds 1.0 to spam from first-time senders
--
Chris
KeyID 0xE372A7DA98E6705C
RE: Lots Of SPAM
Posted by "Randal, Phil" <pr...@herefordshire.gov.uk>.
I use these rules. Score as you see fit. Mind the linebreaks...
body HC_GIRL /\bnice girl that would like to chat.{1,16}Email
me at \
.{1,32}\.info.{1,120}\bpic(ture)?s\b/
describe HC_GIRL Girl with pics scam
score HC_GIRL 5
body HC_GIRL2 /I am (?:using|writing from) my friend's email/
describe HC_GIRL2 Girl with pics scam
score HC_GIRL2 5
Cheers,
Phil
--
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
> -----Original Message-----
> From: Tarak Ranjan [mailto:contacttrm@yahoo.co.in]
> Sent: 26 February 2008 12:15
> To: Spamassassin
> Subject: Lots Of SPAM
>
> Hi List,
> i have posted my RAW email in http://pastebin.ca/918849 ,
> i'm receiving 1000 to 4000 per day this king of mesages.
> SA also skipping this kind of mails....
>
> /
> TArak
>
>
>
Re: Lots Of SPAM
Posted by Tarak Ranjan <co...@yahoo.co.in>.
On Tue, 2008-02-26 at 10:28 -0200, Luis Hernán Otegui wrote:
> Hi, tarak
>
> 2008/2/26, Tarak Ranjan <co...@yahoo.co.in>:
> > Hi List,
> > i have posted my RAW email in http://pastebin.ca/918849 ,
> > i'm receiving 1000 to 4000 per day this king of mesages.
> > SA also skipping this kind of mails....
> >
> > /
>
> Well, I get a beautiful BAYES_99 on the mail you've shown. You should
> tell us more about your setup. Which SA version, how is it running, do
> you use sa-update? Also, you should report the message to
> razor/pyzor/spamcop. That'll help too.
QMAIL+SA[SpamAssassin version 3.1.4]+CLAMD
Re: Lots Of SPAM
Posted by Luis Hernán Otegui <lu...@gmail.com>.
Hi, tarak
2008/2/26, Tarak Ranjan <co...@yahoo.co.in>:
> Hi List,
> i have posted my RAW email in http://pastebin.ca/918849 ,
> i'm receiving 1000 to 4000 per day this king of mesages.
> SA also skipping this kind of mails....
>
> /
Well, I get a beautiful BAYES_99 on the mail you've shown. You should
tell us more about your setup. Which SA version, how is it running, do
you use sa-update? Also, you should report the message to
razor/pyzor/spamcop. That'll help too.
>
> TArak
>
>
>
Regards,
Luis
--
-------------------------------------------------
GNU-GPL: "May The Source Be With You...
Linux Registered User #448382.
When I grow up, I wanna be like Theo...
-------------------------------------------------