How to get SA ...
by Tyler Nally other posts by this author
Dec 14 2006 7:51AM messages near this date
RE: Tagging for spam mails
|
BODY rule fails with double-spaced text
Hello all,
Included (in plain text) at the end of this message is the source of an
e-mail that I received yesterday. Clearly SPAM and it looks like they did
some kind of header injection kind of stuff from their end to get the
e-mail on it's way.
SA didn't recognize this as SPAM. What can be done to trap a message like
this from going to the e-mail inbox?
Thanks a lot.. and thanks in advance.
Tyler Nally
tnally@[...].com
----------obvious spam follows--------------
Return-Path: <www-data@[...].com>
Received: from localhost (yadler.com [127.0.0.1])
by mail.yadler.com (Postfix) with ESMTP id AF7091000006
for <tnally@[...].com> ; Wed, 13 Dec 2006 02:52:09 -0500 (EST)
X-Virus-Scanned: amavisd-new at yadler.com
Received: from mail.yadler.com ([127.0.0.1])
by localhost (superneo.yadler.com [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id WwvayNWlduiX for <tnally@[...].com> ;
Wed, 13 Dec 2006 02:52:09 -0500 (EST)
Received: by mail.yadler.com (Postfix, from userid 99)
id 1AA031000007; Wed, 13 Dec 2006 02:52:09 -0500 (EST)
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on
superneo.yadler.com
X-Spam-Level: **
X-Spam-Status: No, score=2.6 required=4.0 tests=BAYES_50,FORGED_RCVD_HELO,
HEAD_LONG autolearn=no version=3.1.7
Received: from mail.radiosuomipop.fi (metromedia1-hki.far-m.com
[80.64.11.164])
by mail.yadler.com (Postfix) with ESMTP id 9E69C1000006
for <tnally@[...].com> ; Wed, 13 Dec 2006 02:52:06 -0500 (EST)
Received: by mail.radiosuomipop.fi (Postfix, from userid 33)
id 16BE47B6; Wed, 13 Dec 2006 09:52:02 +0200 (EET)
To: of@[...].com,
"Content-Transfer-Encoding:quoted-printable"@metromedia1-hki.far-m.com,
"Content-Type:text/plain"@metromedia1-hki.far-m.com,
"Subject:Never"@metromedia1-hki.far-m.com,
has@[...].com, losing@[...].com,
so@[...].com, much@[...].com,
weight@[...].com, been@[...].com,
so@[...].com, easy@[...].com,
to@[...].com, do@[...].com,
"bcc:bitchesleftnut"@yahoo.com, amt302000@[...].in,
dpmorgan@[...].com, josdurango@[...].net,
captainmanners@[...].com, lastmciver@[...].com, djj0614@[...].com,
queenaxeii2002@[...].com, kneelint@[...].com, toni5192000@[...].com,
cpangel25@[...].com, lisagayle@[...].com, time4irish@[...].com,
sarak@[...].com, jple@[...].net, wjmayhall@[...].com,
luvvinjesus89@[...].com, rchgrbbl1@[...].net,
rmwynne@[...].net, gdavila@[...].edu, wpgrcspnlb@[...].net,
jstacher04@[...].com, hattie-diggs@[...].net,
orendefolksrt@[...].net, rose_bud69@[...].com,
brendandan@[...].com, grtnagle@[...].com, wolfmandak@[...].com,
thgens6@[...].com, jispider@[...].net, doggypiper95@[...].com,
cmebsweet@[...].com, rmvolbrecht@[...].com, gcoy@[...].com,
leblancstar@[...].com, pohlman61591@[...].com, josie1234777@[...].com,
bvaleen@[...].com, stephenkoelker@[...].com, bertsugimoto@[...].com,
datcact@[...].com, starfish11@[...].com, skratcht_rr@[...].com,
swe3tpea33@[...].com, bigeagle300@[...].com, andy_chan@[...].com,
weeneedog@[...].com, kcurd@[...].com, jemty@[...].com,
daltveg@[...].com, fabioandres78@[...].com, kfulwider@[...].net,
cjones@[...].net, mike22wm@[...].com, amypatsis@[...].net,
tonypuckett@[...].com, russnbooger@[...].com,
weissnef@[...].net, sandi3278@[...].com, lindieluu@[...].net,
dellacliff@[...].com, aznmagnus1286@[...].com,
kmartenson@[...].com, meagle2@[...].com,
lindainthebox@[...].com, lashawnhdsn@[...].com,
reandaly@[...].net, bansheebabe3184@[...].com,
michaelsimp52@[...].net, ebo37@[...].uk, hussain575@[...].com,
chakas96926@[...].com, queenie8052003@[...].com,
demonicslaughter2000@[...].com, begladimnoturkid2003@[...].com,
ladyleeech@[...].net, prtygrlj5@[...].com, test@[...].com,
kwas24@[...].com, breauxsncm@[...].com, luktish@[...].com,
laleotalks@[...].com, shartley@[...].net, dakot_02@[...].com,
patti_the_monkey@[...].com, sweetonyou20032003@[...].com,
mrumer@[...].com, darerules88@[...].com,
shortiewonderful@[...].com, slimgoodie08@[...].com,
jacqueline@[...].net, ajrock19203@[...].com, mairo1222@[...].com,
melissa_dawn2005@[...].com, davenpat@[...].net,
bobandpaula@[...].com, kharesunilus@[...].com, kyle0007@[...].com,
leathereagle69@[...].net, heavenscentsoap@[...].net,
tallen@[...].us, hiphop101_uta@[...].com,
m_raenewlander@[...].com, golfpoet@[...].com, kornin_t@[...].com,
bitymee@[...].com, sonnymill@[...].com, judy@[...].com,
timatic29@[...].uk, joesens@[...].net, joaomacedo1@[...].com,
boylover6923@[...].com, rgeymann@[...].com, kathy_frye@[...].com,
jjporter8@[...].com, jconnects@[...].com, tazglow_49036@[...].com,
cathyh@[...].com, marcusqdavis0@[...].com,
mformeller@[...].com, nixboyz@[...].com,
dwmollard2@[...].com, stacynlaura@[...].com,
lystie@[...].com, john1934@[...].com, kalenda@[...].com,
maxg4ce@[...].com, ejropp@[...].net, ljmarton@[...].com,
jtrdaddy77@[...].com, zentz@[...].net, omgroberts@[...].net,
blackprincess1963@[...].com, sallybell65@[...].net,
redneckcopus@[...].com, blossoms28@[...].com, rabster53@[...].com,
kikiwild@[...].net, fraustojohn@[...].com, sonaj00@[...].com,
sam2salem@[...].com, betheustis@[...].com, rustydontex@[...].com,
illwill71@[...].com, agentchad007@[...].com,
kristinakemp@[...].com, aylviax1932@[...].net,
foolonthehill502@[...].com, elisnanna@[...].net,
mvcross@[...].net, archerace2@[...].com, alexosandoval@[...].com,
fordmotorsports.1@[...].com, limmel@[...].com,
harrispa13@[...].net, princess4athug@[...].com,
charles_leo02@[...].in, dszic@[...].com, hhildreth@[...].com,
wilsonwanita@[...].com, andrew2@[...].com, kevinjb05@[...].com,
ddoerr@[...].net, wireman@[...].net, chaechae@[...].com,
vtotten@[...].com, esthercranberry@[...].com, tweety_b14@[...].com,
pink_princess103@[...].com, god_sent_preacher_man@[...].com,
antiques39@[...].net, mavila51@[...].com,
benjaminstar@[...].com, retsam35@[...].com,
suba55@[...].com, maya_kriseman@[...].com,
m.cezar@[...].com, iicraig@[...].net, lynnesepaulson@[...].com,
summer_scofield@[...].com, soccer5162002@[...].com,
newstart4jim@[...].com, melanie_renee_hughes@[...].com,
mcdonald@[...].net, navaho_warrior68@[...].com, skeme399@[...].com,
s_nassiri@[...].com, destinyendless@[...].com,
rwholding@[...].com, sjpaulsen02@[...].com,
basketball_3_23@[...].com, lisa.d.young.sm8i@[...].com,
brianblake@[...].net, letsbmoz@[...].com, michguy2780@[...].com,
mac12121@[...].com, llmonfort@[...].net, tomad_51@[...].com,
dude@[...].net, jeff4816036@[...].com, jdogg6961@[...].com,
nichetra@[...].com, lesgetfisikal@[...].com,
billiamtheman@[...].com, robb_myers2000@[...].com, kclone@[...].net,
dsena@[...].com, shanaerichards@[...].net,
e.g.xnon@[...].com, italgirl11@[...].com, shirleys@[...].com,
gonzobean02@[...].com, rlmcc_99@[...].com, hotrod379@[...].com,
robert505@[...].pl, msmith3@[...].edu, julswilde@[...].com,
mmosely58@[...].com, tburroughs@[...].com, ansualiyar@[...].com,
jcbarlow@[...].com, lil_cas02@[...].com, vmatias@[...].net,
empatterson213@[...].com, vote@[...].com, sweetnicki@[...].net,
hudson@[...].net, atlhawkfan@[...].com, deborah@[...].net,
jbrice@[...].com, wrightb2@[...].mil,
blueangel_108@[...].com, carolina120590@[...].com,
mizjazzy22@[...].com, insaz420@[...].com, helsinki58@[...].com,
ruebentcpa@[...].net, halfpint65486@[...].com,
niekobluejess@[...].com, robert.wilson@[...].com,
lilmac48@[...].net, andreab@[...].com, lc_40101@[...].com,
alexandragamble2003@[...].com, swtmommie69@[...].com,
lancexl@[...].ca, blakemash32@[...].com, cpedraza77@[...].com,
needlesandpins@[...].com, ehinson@[...].com,
countrybabe2@[...].net, sheshejanae@[...].com, cyyoung61@[...].com,
subzerofujin@[...].com, tdejan@[...].com, wsewell@[...].net,
rcanyes@[...].com, tamopell@[...].net, abdpub@[...].com,
twiltshire@[...].net, a1941@[...].net,
cchladek0796@[...].com, lamar7777@[...].com, cgill@[...].com,
abkm48116@[...].net, tcolman@[...].com, konstint@[...].com,
scid@[...].com, moorebd2001@[...].com, fredmorel@[...].fr,
sporty-sassy231@[...].net, elladdb@[...].com, tanyabob@[...].com,
yesmom40@[...].com, dill26@[...].net, bburnham@[...].edu,
chauffe@[...].com, bettyanddick@[...].net, tzip816ratz@[...].com,
pcheng2@[...].com, harrisis@[...].com, santabritt@[...].com,
hypiechick12@[...].com, cagtucson@[...].com, rputtsky@[...].com,
jennifer912003@[...].com, jedjar@[...].com, davidmora@[...].net,
fkeeley22@[...].com, jackie_iverson08@[...].com,
jdhamers@[...].net, laurel12252@[...].com, sefoster@[...].com,
andrusl@[...].net, drkidd@[...].com,
danandjorodriguez@[...].net, edwing@[...].net,
juan_a_ruiz@[...].com, scud8084@[...].net,
hankkosko@[...].com, elkukazewski@[...].com,
gareybg@[...].com, sionnac@[...].net, dee271942@[...].com,
udmarks@[...].net, imalisap@[...].com,
gerritsen_kees@[...].com, troc@[...].com, ylt@[...].com,
shark650@[...].com, nemomymojo@[...].com, tnally@[...].com,
bwfbwf55441@[...].com, georgeschell@[...].com,
tdecenzo@[...].com, axjeff1128@[...].com, adk_man2000@[...].com,
shewrites@[...].net, jawb_watkins@[...].com, acordof3@[...].com,
tweeter69blues@[...].com, tahoeski@[...].net, jimb93us@[...].com,
sariyahe_33@[...].com, nana499@[...].com, slm242@[...].com,
mmannheim@[...].edu, wolf34@[...].net, netwolf2222@[...].com,
A@[...].com, Scientific@[...].com,
"Breakthrough...Green"@metromedia1-hki.far-m.com,
tea@[...].com, has@[...].com,
been@[...].com, part@[...].com,
of@[...].com, the@[...].com,
traditional@[...].com,
Asi=@metromedia1-hki.far-m.com, an@[...].com,
diet@[...].com, for@[...].com,
centuries.Asian@[...].com,
peoples@[...].com, have@[...].com,
long@[...].com, believed@[...].com,
that@[...].com, drinking@[...].com,
green=@metromedia1-hki.far-m.com, tea@[...].com,
daily@[...].com, is@[...].com,
the@[...].com, key@[...].com,
to@[...].com, a@[...].com,
long@[...].com, and@[...].com,
healthy@[...].com,
life.Now@[...].com, it's@[...].com,
a@[...].com, proven@[...].com,
scienti=@metromedia1-hki.far-m.com, fic@[...].com,
"fact:green"@metromedia1-hki.far-m.com,
tea's@[...].com, natural@[...].com,
active@[...].com,
ingredients@[...].com,
enhance@[...].com, human@[...].com,
health@[...].com, incr=@metromedia1-hki.far-m.com,
ease@[...].com, longevity@[...].com,
and@[...].com, aid@[...].com,
in@[...].com, WEIGHT@[...].com,
LOSS.If@[...].com, you're@[...].com,
looking@[...].com, to@[...].com,
shed@[...].com, pounds@[...].com,
yet@[...].com, you@[...].com,
have@[...].com, a@[...].com,
busy@[...].com, lifestyle@[...].com,
to@[...].com, work@[...].com,
aro=@metromedia1-hki.far-m.com, und@[...].com,
there@[...].com, is@[...].com,
no@[...].com, better@[...].com,
solution.Simply@[...].com,
place@[...].com, a@[...].com,
couple@[...].com, drops@[...].com,
of@[...].com, our@[...].com,
ultra@[...].com, =@metromedia1-hki.far-m.com,
purified@[...].com, tea@[...].com,
extract@[...].com, in@[...].com,
any@[...].com, drink@[...].com,
you@[...].com, wish@[...].com,
to@[...].com, obtain@[...].com,
the@[...].com, full@[...].com,
benefits@[...].com, of@[...].com,
g=@metromedia1-hki.far-m.com, reen@[...].com,
tea@[...].com, immediately@[...].com,
without@[...].com, any@[...].com,
harsh@[...].com, taste@[...].com,
or@[...].com, any@[...].com,
side@[...].com,
effects.Science@[...].com (all nat= ural ingredients),
has@[...].com, proven@[...].com,
very@[...].com, clearly@[...].com,
how@[...].com, effective@[...].com,
green@[...].com, tea@[...].com,
can@[...].com, be@[...].com,
for@[...].com, those@[...].com,
tr=@metromedia1-hki.far-m.com, ying@[...].com,
to@[...].com, lose@[...].com,
weight.Click@[...].com,
here@[...].com, to=@metromedia1-hki.far-m.com,
find@[...].com, out@[...].com,
how@[...].com, to@[...].com,
receive@[...].com, a@[...].com,
completely@[...].com, free@[...].com,
bottle@[...].com, for@[...].com,
a@[...].com, limited@[...].com,
"time."@metroradio.fi
Subject: to
From: web server <ei_toimiva_osoite@[...].fi>
Message-Id: <20061213075202.16BE47B6@[...].fi>
Date: Wed, 13 Dec 2006 09:52:02 +0200 (EET)
reset: to
city: to
zipcode: to
vastaus: to
puhelin: to
address: to
email: to
nimi: to
Viestin lähettäjän osoite: 61.255.9.239
|