Discussion:
spam getting through
JC Putter
16 years ago
Permalink
Here is the raw message header

Received-SPF: none (yahoo.com: No applicable sender policy available) receiver=localhost.localdomain; identity=mailfrom; envelope-from="***@yahoo.com"; helo=n4a.bullet.mail.ac4.yahoo.com; client-ip=76.13.13.67
X-Greylist: delayed 357 seconds by postgrey-1.31 at localhost.localdomain; Sat, 27 Dec 2008 12:58:37 SAST
Received: from n4a.bullet.mail.ac4.yahoo.com (n4a.bullet.mail.ac4.yahoo.com [76.13.13.67])
by mail.centerweb.co.za (Nexus Mail Gateway) with SMTP id 24D3210884A
for <***@centerweb.co.za>; Sat, 27 Dec 2008 12:58:28 +0200 (SAST)
Received: from [76.13.13.25] by n4.bullet.mail.ac4.yahoo.com with NNFMP; 27 Dec 2008 10:52:29 -0000
Received: from [76.13.10.166] by t4.bullet.mail.ac4.yahoo.com with NNFMP; 27 Dec 2008 10:52:29 -0000
Received: from [127.0.0.1] by omp107.mail.ac4.yahoo.com with NNFMP; 27 Dec 2008 10:52:29 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: ***@omp107.mail.ac4.yahoo.com
Received: (qmail 27693 invoked by uid 60001); 27 Dec 2008 10:52:28 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:Cc:MIME-Version:Content-Type:Message-ID;
b=MlKiySNdP9hEdZ9LDYsbQ2d6MHhtxVz7Uudz/scUGnnaMHF+xRKvswKE+Qoi9k4ec6uRd2xRstsdgKPWxcUHb076wSnXl3doRV7ir6lsPp1sLspU4PnhIAduSqTEe3jSR7xzEyWHWGxAD7Yx5gvC+nFYd+7ZO6HnBYCvt4NkYe0=;
X-YMail-OSG: C60949oVM1kqwRH41pjuW2ACLXkxhudkWLT8O9BEKDi02BLaDyUCtUCUA0_3pbejWjkV1IXCep1tsuS2buw6GiGVrK6ObG4sLhQfCYVfEmApC67MOvsdxRyESgPpzatborHlvId71GWqeNtN4YoHM9JT5mjM
Received: from [98.244.135.188] by web59702.mail.ac4.yahoo.com via HTTP; Sat, 27 Dec 2008 02:52:27 PST
X-Mailer: YahooMailWebService/0.7.260.1
Date: Sat, 27 Dec 2008 02:52:27 -0800 (PST)
From: mcguire Glass <***@yahoo.com>
Reply-To: ***@yahoo.com
Subject: Bring the new wave in your life
To: ***@beeb.net
Cc: ***@gmail.com, ***@centerweb.co.za, ***@yahoo.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1167732217-1230375147=:26874"
Message-ID: ***@web59702.mail.ac4.yahoo.com<mailto:***@web59702.mail.ac4.yahoo.com>

Here is the contents of the message, i am getting alot of spam with url's spaced this way....

Bring the new wave in your life

mcguire Glass [***@yahoo.com]


Sent:

27 December 2008 12:52

To:

***@beeb.net<https://mail.numata.co.za/owa/?ae=Item&t=IPM.Note&a=New&to=bertuk%40beeb.net&nm=bertuk%40beeb.net>

Cc:

***@gmail.com<https://mail.numata.co.za/owa/?ae=Item&t=IPM.Note&a=New&to=bertus.lammerts%40gmail.com&nm=bertus.lammerts%40gmail.com>; Bertus<https://mail.numata.co.za/owa/?ae=Item&t=IPM.Note&id=RgAAAABbDcsiiDsISIXeoxuOD%2fuBBwDVLt9kuWycQaKzohAoDhgLAAAQhBEiAADVLt9kuWycQaKzohAoDhgLAAAQhBNmAAAJ>; ***@yahoo.com<https://mail.numata.co.za/owa/?ae=Item&t=IPM.Note&a=New&to=bertusis%40yahoo.com&nm=bertusis%40yahoo.com>

Attachments:




Add more fire into your intimate relationship.
w w w . h o t f e l l . c o m - no dashes






[cid:***@01C96874.DF8748D0]



This message has been scanned by Nexus Mail Gateway
Matus UHLAR - fantomas
16 years ago
Permalink
Post by JC Putter
Here is the raw message header
Don't post spam into this mailing list. Store it somewhere and paste a link.
We'd even need to convert into message, so it could be scanned.

Btw, I don't see any X-Spam header. Did you scan the message by SA at all?
--
Matus UHLAR - fantomas, ***@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I drive way too fast to worry about cholesterol.
Kai Schaetzl
16 years ago
Permalink
Post by JC Putter
Here is the raw message header
So, what? This list is not your personal rule generator.
And please stop sending HTML and pictures to this and any other mailing
lists.
Use your brain at least for a minute before you post. At least *that* you
should have learned on the MailScanner list.

Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
Benny Pedersen
16 years ago
Permalink
Post by JC Putter
This message has been scanned by Nexus Mail Gateway
clamav signature is here:

hotfell.com=7720772077202e2068206f207420662065206c206c202e2063206f206d0a

save it in you clamav database dir and get rid of that domain

name it hotfell_com.db else it wont work

had this being january i had not maked it for you
--
Benny Pedersen
Need more webspace ? http://www.servage.net/?coupon=cust37098
Continue reading on narkive:
Loading...