On Tuesday, March 8, 2005, 8:48:37 AM, Daniel Araujo wrote:
> People :
> We are receiving a lot of kind of messages like that. Any ideas to block
> this ?
> Thanks,
> Daniel.
Well among other things, the domain of the URI in the spam
is listed on 5 SURBLs:
> Content analysis details: (14.1 points, 5.0 required)
>
> pts rule name description
> ---- ---------------------- --------------------------------------------------
> -0.0 SPF_PASS SPF: sender matches SPF record
> 0.0 HTML_MESSAGE BODY: HTML included in message
> 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
> [score: 0.4316]
> 2.5 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
> [cf: 100]
> 2.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
> 1.0 URIBL_SBL Contains an URL listed in the SBL blocklist
> [URIs: dftphildeutschv.net]
> 0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
> [URIs: dftphildeutschv.net]
> 1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
> [URIs: dftphildeutschv.net]
> 3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
> [URIs: dftphildeutschv.net]
> 4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
> [URIs: dftphildeutschv.net]
> 0.0 MIME_BOUND_NEXTPART Spam tool pattern in MIME boundary
> -1.2 AWL AWL: From: address is in the auto white-list
(It's on jp.surbl.org now too.)
Enable network tests.
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
|