[SURBL-Discuss] ****SPAM(5.7)**** Re: SURBL missing this spam

Bill Landry billl at pointshare.com
Sat Mar 5 02:09:30 CET 2005


SpamAssassin, running on "mail.dailyhills.com", has identified this incoming
email as possible spam.  The original message has been attached to this
email so you can view it (if it isn't spam).
If you have any questions, contact postmaster at dailyhills.com for details.

Content preview:  ----- Original Message ----- From: "Bill Landry" 
  <billl at pointshare.com> > > I must have received this spam 12 times or 
  more in the last 24 hours and > > even though its listed on the SURBL, 
  spamassassin fails to match it > against > > them. > > When I submit 
  the spams to spamcop it parses the url everytime. > > SURBL seems to 
  work on all other spams, just wondering if they have found > a > > way 
  to avoid spamassassin catching the URL. > > > > Martin > > Hmmm, that 
  does seem strange. Didn't get caught here, either. However: > > 
  crazyrxl0wprices.com.multi.surbl.org. 2100 IN A 127.0.0.114 > > So 
  http://crazyrxl0wprices.com is listed on several of the SURBL multi > 
  lists. Let's see if this message gets flagged or not... [...] 

Content analysis details:   (5.7 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS               SPF: sender matches SPF record
 2.5 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
                            [cf: 100]
-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                            [score: 0.0000]
 2.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 1.0 URIBL_SBL              Contains an URL listed in the SBL blocklist
                            [URIs: crazyrxl0wprices.com]
 0.4 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL blocklist
                            [URIs: crazyrxl0wprices.com]
 3.2 URIBL_OB_SURBL         Contains an URL listed in the OB SURBL blocklist
                            [URIs: crazyrxl0wprices.com]
 4.3 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL blocklist
                            [URIs: crazyrxl0wprices.com]
-5.6 AWL                    AWL: From: address is in the auto white-list

---- ---------------------- --------------------------------------------------




More information about the Discuss mailing list