Any of you able to block this SPAM?

[Trevor <sp...@johncom.net>]

Hi,

I've been receiving a number of these emails below.
Are any of you getting them and having any luck blocking them?



 

Re: Any of you able to block this SPAM?

[Doc Schneider <ma...@maddoc.net>]

Trevor wrote:
> Hi,
> 
> I've been receiving a number of these emails below.
> Are any of you getting them and having any luck blocking them?
> 
>  

Take a look at http://www.rulesemporium.com/rules/70_sare_stocks.cf

That rule set catches most of these quite well.

-- 

  -Doc

  Penguins: Do it on the ice.
    4:12pm  up 23 days, 12:30, 18 users,  load average: 0.29, 0.51, 0.50

  SARE HQ  http://www.rulesemporium.com/

Re: Any of you able to block this SPAM?

[Michael Monnerie <mi...@it-management.at>]

On Montag, 8. Mai 2006 10:34 Trevor wrote:
> I've been receiving a number of these emails below.
> Are any of you getting them and having any luck blocking them?

Yes, your message made:

X-Spam-Status: Yes, hits=7.945 tagged_above=-999 required=5
 tests=HTML_IMAGE_ONLY_08=3.126, HTML_MESSAGE=0.001, 
HTML_TITLE_EMPTY=0.214,
 INVALID_TZ_GMT=1.042, RELAY_AT=0.01, SARE_GIF_ATTACH=0.75,
 SARE_GIF_STOX=1.66, SPF_FAIL=1.142

mfg zmi
-- 
// Michael Monnerie, Ing.BSc    -----      http://it-management.at
// Tel: 0660/4156531                          .network.your.ideas.
// PGP Key:   "lynx -source http://zmi.at/zmi3.asc | gpg --import"
// Fingerprint: 44A3 C1EC B71E C71A B4C2  9AA6 C818 847C 55CB A4EE
// Keyserver: www.keyserver.net                 Key-ID: 0x55CBA4EE

Re: Any of you able to block this SPAM?

[Sipos Gabor <g_...@freemail.hu>]

bayes  pretty  much  catches  these, I don't rely only on spamassassin's
default   rules,   but  train  bayes  with spam from my users (they save
them in a folder, and I run sa-learn once a day to feed bayes).


Gabor Sipos

>   
>  
> Hi,

> I've been receiving a number of these emails  below.
> Are any of you getting them and having any luck blocking them?
>  
>  
>  
>  

>   

Re: Any of you able to block this SPAM?

[nick <ni...@mobilia.it>]

Trevor wrote:
> Hi,
> 
> I've been receiving a number of these emails below.
> Are any of you getting them and having any luck blocking them?
> 
>  
  1.1 EXTRA_MPART_TYPE       Header has extraneous Content-type:...type= 
entry
  0.1 FORGED_RCVD_HELO       Received: contains a forged HELO
  0.1 HTML_90_100            BODY: Message is 90% to 100% HTML
  1.0 BAYES_60               BODY: Bayesian spam probability is 60 to 80%
                             [score: 0.7035]
  1.1 MIME_HTML_MOSTLY       BODY: Multipart message mostly text/html MIME
  0.0 HTML_MESSAGE           BODY: HTML included in message
  3.1 HTML_IMAGE_ONLY_08     BODY: HTML: images with 400-800 bytes of words
  1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
                             above 50%
                             [cf: 100]
  0.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
  0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                             [cf: 100]
  1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see 
<http://www.spamcop.net/bl.shtml?82.13.147.240>]
  1.9 RCVD_IN_NJABL_DUL      RBL: NJABL: dialup sender did non-local SMTP
                             [82.13.147.240 listed in combined.njabl.org]



That's what they're hitting on my server...