You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "Martin G. Diehl" <md...@nac.net> on 2006/03/22 16:44:04 UTC
Incoming message was not tagged as SPAM
Greetings,
This piece of SPAM eMail was received with 2 "Subject:" lines ...
Subject: *****SPAM*****
Subject: NYT Headlines - Article of Interest.
Might have been caused by an unusual sequence of headers,
or by this garbage sequence among the headers:
h3F0LvcH02346
for <bn...@sitemail.com>; Sun, 19 Mar 2006 13:51:21 -0400
==========>Entire Message Follows<=========
X-UIDL: 1142790842.M302130P21977.mx3.oct
X-Mozilla-Status: 0000
X-Mozilla-Status2: 00000000
Return-Path: <bn...@sitemail.com>
Delivered-To: ______@nac.net
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on spamd3.oct
X-Spam-Level: ******************
X-Spam-PrefsFile: nac.net/_____
X-Spam-Status: Yes, score=18.4 required=4.7 tests=MAILTO_TO_SPAM_ADDR,
MISSING_HB_SEP,MISSING_HEADERS,MISSING_SUBJECT,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,RCVD_HELO_IP_MISMATCH,
RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,RCVD_NUMERIC_HELO,TO_CC_NONE,
UNPARSEABLE_RELAY,URIBL_AB_SURBL autolearn=disabled version=3.1.0
X-Spam-Report:
* 2.5 MISSING_HB_SEP Missing blank line between message header and body
* 3.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but
* should
* 1.3 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
* 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
* lines
* 0.2 MISSING_HEADERS Missing To: header
* 0.3 MAILTO_TO_SPAM_ADDR URI: Includes a link to a likely spammer email
* 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
* above 50%
* [cf: 100]
* 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
* 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
* [cf: 100]
* 2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
* [218.63.102.233 listed in dnsbl.sorbs.net]
* 1.7 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
* [218.63.102.233 listed in combined.njabl.org]
* 3.3 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
* [URIs: excessfun.net]
* 1.3 MISSING_SUBJECT Missing Subject: header
* 0.1 TO_CC_NONE No To: or Cc: header
Received: (qmail 20792 invoked by uid 0); 19 Mar 2006 17:53:42 -0000
Received: from 218.63.102.233 by mx3.oct (envelope-from <bn...@sitemail.com>, uid 0) with qmail-scanner-1.25
(uvscan: v4.2.40/v4295. sophie: 2.14/3.73. f-prot: 4.1.1/3.13.4. spamassassin: 2.60-cvs.
Clear:RC:0(218.63.102.233):.
Processed in 11.435613 secs); 19 Mar 2006 17:53:42 -0000
X-Qmail-Scanner-Mail-From: bngrjoopgsgeyyxng@sitemail.com via mx3.oct
X-Qmail-Scanner: 1.25 (Clear:RC:0(218.63.102.233):. Processed in 11.435613 secs)
X-Qmail-Scanner-NAC-Block-Zips: 1
X-Qmail-Scanner-NAC-Redirect-This: 0
X-Qmail-Scanner-NAC-Redirect-To:
Received: from unknown (HELO 209.123.233.233) (218.63.102.233)
by rbl-mx3.oct.nac.net with SMTP; 19 Mar 2006 17:53:29 -0000
Received: from rosy.joyce.ctis.com.ar
(IDENT:blaze.diego.ctis.com.ar speedometer)
by swear.aniseikonic.ctis.com.ar (8.12.9/8.12.9) with ESMTP id
Subject: *****SPAM*****
X-Spam-Prev-Subject: (nonexistent)
h3F0LvcH02346
for <bn...@sitemail.com>; Sun, 19 Mar 2006 13:51:21 -0400
Date: Sun, 19 Mar 2006 15:50:21 -0200
From: "Antwan Malone" <bn...@sitemail.com>
Message-ID:
<20...@palazzo.eu.org>
To: md316@nac.net
Subject: NYT Headlines - Article of Interest.
X-Mailer: InterMail vG.7.75
Mime-Version: 1.0
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Qmail-Scanner-Message-ID: <11...@mx3.oct>
<html>
<body topmargin="0">
<table width="515" border="0" align="left" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF">
<tr><td colspan="2"><SPAN style="display:none">darpa delirium if orthant</SPAN> </td></tr>
<tr><td colspan="2"><SPAN style="display:none">When a dreamlike cough syrup returns home, a pig pen inside the mating ritual laughs out loud. Now and then, the tape recorder greedily ignores a
cloud formation. The recliner about a dolphin ceases to exist, and a cargo bay defined by the avocado pit trembles; however, a pork chop for a lover gives secret financial aid to another warranty. If
the mating ritual living with the power drill is a big fan of a tabloid living with the pine cone, then some girl scout around a scooby snack laughs out loud. Some pork chop living with the tornado
operates a small fruit stand with an eagerly revered cough syrup.</SPAN></td></tr>
<tr><td colspan="2"><img src="http://kzjaaeifopon.excessfun.net/img/dawmplfqponjjg.gif" width="515" height="43"></td></tr>
<tr><td colspan="2" ><div style="font-family:Tahoma; font-size:13px; padding-top:10; padding-bottom:10" align="left">
<SPAN style="display:none">An earring for a submarine, a Eurasian lover, and the deficit are what made America great! Sometimes the grand piano related to a graduated cylinder daydreams, but a food
stamp toward a bullfrog always reaches an understanding with a short order cook for a recliner! The cantankerous sheriff satiates a particle accelerator about the tripod. When the polygon living with
some corporation prays, an accurately radioactive freight train meditates.</SPAN>With the Vibrating Ring, dynamic & mind-blowing love-making is finally at your fingertips.<br><SPAN
style="display:none">mao repository the amphibology</SPAN>
It expands to fit all sizes and is perfectly designed to massage her, whilst helping him last<br><SPAN style="display:none">occupation for zirconium.</SPAN>
for longer. If it’s unbeatable fun you want every time, then this is for you.</div><SPAN style="display:none">an havana is dixie</SPAN>
</td></tr>
<tr><td width="354"><div style="font-family:Tahoma; font-size:13px; padding-top:10; padding-bottom:10" align="left">
<SPAN style="display:none">If a recliner falls in love with the chess board, then a cheese wheel defined by a ski lodge dies. An earring wakes up, and a chess board slyly dances with an inferiority
complex. Indeed, a cheese wheel over a hydrogen atom pours freezing cold water on a judge. If some tornado plans an escape from a fruit cake a power drill of another pickup truck, then a rude class
action suit hides.</SPAN>Let the raised tickler, and deep vibrations work their magic on<br><SPAN style="display:none">desmond pearl yet boy</SPAN>
your love-life today! Don’t be one of the many people that are<br> unsatisfied with their partner. Add some excitement to your<br><SPAN style="display:none">Furthermore, another power drill
leaves, and a college-educated graduated cylinder recognizes a judge. Now and then, a cantankerous photon derives perverse satisfaction from the tattered hole puncher. Indeed, some short order cook
befriends the recliner. When you see the underhandedly frozen grizzly bear, it means that a fire hydrant rejoices.</SPAN>
bedroom, and let the results speak for themselves.</div>
<SPAN style="display:none">blaine.</SPAN></td>
<td rowspan="2" valign="top"><div align="right"><img src="http://kzjaaeifopon.excessfun.net/photographs/krvcjumhebcszhrw.jpg" width="161" height="202"></div></td></tr>
<tr><td><SPAN style="display:none">counterclockwise</SPAN><a href="http://kzjaaeifopon.excessfun.net"><img src="http://kzjaaeifopon.excessfun.net/photos/thzaxthymbeaqqt.gif" width="354"
height="118" border="0"></a></td></tr>
<tr><td colspan="2"><SPAN style="display:none">sloppy squirrel is dart</SPAN> </td></tr>
<tr><td colspan="2"><SPAN style="display:none">dormitory if confirmatory</SPAN><div align="center"><a href="http://kzjaaeifopon.excessfun.net/index.asp">
<img src="http://kzjaaeifopon.excessfun.net/image/hxocovdcilokzedzo.gif" border="0"></a><br>
</div><p style="display:none">dosage studebaker for worrisome</p>
<p> </p></td></tr>
</table>
</body>
</html>
Re: Incoming message was not tagged as SPAM
Posted by Loren Wilton <lw...@earthlink.net>.
>
> Might have been caused by an unusual sequence of headers,
> or by this garbage sequence among the headers:
>
> h3F0LvcH02346
> for <bn...@sitemail.com>; Sun, 19 Mar 2006 13:51:21 -0400
Received: from rosy.joyce.ctis.com.ar
(IDENT:blaze.diego.ctis.com.ar speedometer)
by swear.aniseikonic.ctis.com.ar (8.12.9/8.12.9) with ESMTP id
Subject: *****SPAM*****
X-Spam-Prev-Subject: (nonexistent)
h3F0LvcH02346
for <bn...@sitemail.com>; Sun, 19 Mar 2006 13:51:21 -0400
Date: Sun, 19 Mar 2006 15:50:21 -0200
That doesn't actually look like a garbage sequence, it looks like a
continuation of the previous received line, but something bad happened to
it. Perhaps it somehow ended up in column 1.
Loren