You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Michael Scheidell <sc...@secnap.net> on 2006/12/31 15:01:51 UTC
Even senators sending image spam
Just got (and CAUGHT!!!) image spam from one of the Florida Senators.
Imageplugin.pm helped catch it, along with SARE_GIF, and other plugins.
Thanks to all who share to help keep the net spam free
(and shame on you Bill Nelson. Too bad you folks put an exemption in
the CAN-SPAM law for 'political' spam)
X-Spam-Status: Yes, score=7.957 tagged_above=-999 required=5
tests=[BAYES_50=0.001, BR_SPAMMER_URI=2,
DK_POLICY_SIGNSOME=0.001,
DNS_FROM_RFC_ABUSE=0.2, HTML_40_50=0.496, HTML_MESSAGE=0.001,
INLINE_IMAGE=1, L_P0F_Unix=-0.1, MED_INFORMATION=1,
MIME_BASE64_BLANKS=0.224, MIME_BASE64_NO_NAME=0.224,
NO_REAL_NAME=0.961, SARE_GIF_ATTACH=0.75, SPF_PASS=-0.001,
TVD_FW_GRAPHIC_NAME_MID=1.2]
X-Amavis-OS-Fingerprint: Solaris 10 (beta) (NAT!), (distance 13, link:
GPRS,
T1, FreeS/WAN), [156.33.111.18]
Received: from p-ess-cms1.senate.gov (cmsp18.senate.gov [156.33.111.18])
by 0.mail.spammertrap.net (Postfix) with ESMTP id 383CC17017
for <sc...@secnap.net>; Sat, 30 Dec 2006 23:56:16 -0500
(EST)
Received: from Nelson-IT01.senate.gov (nelson-it01.senate.gov
[156.33.18.61])
by p-ess-cms1.senate.gov (Switch-3.2.2/Switch-3.2.2) with ESMTP
id kBV4uWsi000042
for <sc...@secnap.net>; Sat, 30 Dec 2006 23:56:47 -0500
(EST)
Subject: [SPAM]Important Tax News for Floridians
From: Bill@billnelson.senate.gov
To: scheidell@secnap.net
Message-ID:
<OF...@senate.gov>
Date: Sat, 30 Dec 2006 23:56:42 -0500
X-MIMETrack: Serialize by Router on NELSON-IT01/SBN(Release
6.5.5|November 30, 2005) at
12/30/2006 11:56:47 PM
MIME-Version: 1.0
Content-type: multipart/related;
Boundary="0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06"
Return-Path: scheidell@secnap.net
X-OriginalArrivalTime: 31 Dec 2006 04:56:57.0916 (UTC)
FILETIME=[199477C0:01C72C98]
--0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: multipart/alternative;
Boundary="1__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06"
--1__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: text/plain; charset=UTF-8
Content-transfer-encoding: base64
--1__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: text/html; charset=UTF-8
Content-Disposition: inline
Content-transfer-encoding: base64
--1__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06--
--0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: image/gif;
name="C2769376.gif"
Content-Disposition: inline; filename="C2769376.gif"
Content-ID: <10...@senate.gov>
Content-transfer-encoding: base64
--0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: image/gif;
name="C9836505.gif"
Content-Disposition: inline; filename="C9836505.gif"
Content-ID: <20...@senate.gov>
Content-transfer-encoding: base64
--0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: image/gif;
name="ecblank.gif"
Content-Disposition: inline; filename="ecblank.gif"
Content-ID: <30...@senate.gov>
Content-transfer-encoding: base64
--0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06--
--
Michael Scheidell, CTO
SECNAP Network Security Corporation
Keep up to date with latest information on IT security: Real time
security alerts:
http://www.secnap.com/news
RE: Even senators sending image spam
Posted by vertito <ve...@aim-consultants.com>.
pls, can you forward me a copy of that email copy to ver@aim-consultants.com
tnx
-----Original Message-----
From: Michael Scheidell [mailto:scheidell@secnap.net]
Sent: Sunday, December 31, 2006 3:02 PM
To: users@spamassassin.apache.org
Cc: Bill@billnelson.senate.gov
Subject: Even senators sending image spam
Just got (and CAUGHT!!!) image spam from one of the Florida Senators.
Imageplugin.pm helped catch it, along with SARE_GIF, and other plugins.
Thanks to all who share to help keep the net spam free (and shame on you Bill Nelson. Too bad you
folks put an exemption in the CAN-SPAM law for 'political' spam)
X-Spam-Status: Yes, score=7.957 tagged_above=-999 required=5
tests=[BAYES_50=0.001, BR_SPAMMER_URI=2, DK_POLICY_SIGNSOME=0.001,
DNS_FROM_RFC_ABUSE=0.2, HTML_40_50=0.496, HTML_MESSAGE=0.001,
INLINE_IMAGE=1, L_P0F_Unix=-0.1, MED_INFORMATION=1,
MIME_BASE64_BLANKS=0.224, MIME_BASE64_NO_NAME=0.224,
NO_REAL_NAME=0.961, SARE_GIF_ATTACH=0.75, SPF_PASS=-0.001,
TVD_FW_GRAPHIC_NAME_MID=1.2]
X-Amavis-OS-Fingerprint: Solaris 10 (beta) (NAT!), (distance 13, link:
GPRS,
T1, FreeS/WAN), [156.33.111.18]
Received: from p-ess-cms1.senate.gov (cmsp18.senate.gov [156.33.111.18])
by 0.mail.spammertrap.net (Postfix) with ESMTP id 383CC17017
for <sc...@secnap.net>; Sat, 30 Dec 2006 23:56:16 -0500
(EST)
Received: from Nelson-IT01.senate.gov (nelson-it01.senate.gov
[156.33.18.61])
by p-ess-cms1.senate.gov (Switch-3.2.2/Switch-3.2.2) with ESMTP id kBV4uWsi000042
for <sc...@secnap.net>; Sat, 30 Dec 2006 23:56:47 -0500
(EST)
Subject: [SPAM]Important Tax News for Floridians
From: Bill@billnelson.senate.gov
To: scheidell@secnap.net
Message-ID:
<OF...@senate.gov>
Date: Sat, 30 Dec 2006 23:56:42 -0500
X-MIMETrack: Serialize by Router on NELSON-IT01/SBN(Release 6.5.5|November 30, 2005) at
12/30/2006 11:56:47 PM
MIME-Version: 1.0
Content-type: multipart/related;
Boundary="0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06"
Return-Path: scheidell@secnap.net
X-OriginalArrivalTime: 31 Dec 2006 04:56:57.0916 (UTC) FILETIME=[199477C0:01C72C98]
--0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: multipart/alternative;
Boundary="1__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06"
--1__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: text/plain; charset=UTF-8
Content-transfer-encoding: base64
--1__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: text/html; charset=UTF-8
Content-Disposition: inline
Content-transfer-encoding: base64
--1__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06--
--0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: image/gif;
name="C2769376.gif"
Content-Disposition: inline; filename="C2769376.gif"
Content-ID: <10...@senate.gov>
Content-transfer-encoding: base64
--0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: image/gif;
name="C9836505.gif"
Content-Disposition: inline; filename="C9836505.gif"
Content-ID: <20...@senate.gov>
Content-transfer-encoding: base64
--0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06
Content-type: image/gif;
name="ecblank.gif"
Content-Disposition: inline; filename="ecblank.gif"
Content-ID: <30...@senate.gov>
Content-transfer-encoding: base64
--0__=0ABBF8C0DFFE4E068f9e8a93df938690918c0ABBF8C0DFFE4E06--
--
Michael Scheidell, CTO
SECNAP Network Security Corporation
Keep up to date with latest information on IT security: Real time security alerts:
http://www.secnap.com/news