Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Certain spams passing through
  FAQ FAQ  Forum Search   Register Register  Login Login

Certain spams passing through

 Post Reply Post Reply
Author
susheel View Drop Down
Newbie
Newbie
Avatar

Joined: 12 March 2008
Location: Bombay
Status: Offline
Points: 8
Post Options Post Options   Thanks (0) Thanks(0)   Quote susheel Quote  Post ReplyReply Direct Link To This Post Topic: Certain spams passing through
    Posted: 22 March 2008 at 10:29am
Roberto et all,

There are certain one line spams which are passing through for Spam Filter for a long time and frustrating my clients. Please give me a solution to get rid of these. Sample headers are for your reference :

Received: from scm.worldindia.com ([208.115.36.20])
        by windows.worldindia.com (Merak 8.0.3) with SMTP id NTA46774
        for <susheel@worldindia.com>; Sat, 22 Mar 2008 08:51:53 -0400
Received: from 77.85.89.8 by scm.worldindia.com (LogSat Software SMTP Server); Sat, 22 Mar 2008 09:51:47 -0400
Received: from [116.222.130.27] (helo=ruf)
    by 77-85-89-8.btc-net.bg with smtp (Exim 4.62 (FreeBSD))
    id 1K"0E"-0007aX-Eu; Sat, 22 Mar 2008 14:53:05 +0200
Message-ID: <002f01c88c1b$7d751590$1b82de74@ruf>
From: <osvaldo.gorosito@village.not-extensia.de>
To: <susheel@worldindia.com>
Subject: Tired of a small Pe?
Date: Sat, 22 Mar 2008 14:51:47 +0200
MIME-Version: 1.0
Content-Type: text/plain;
    format=flowed;
    charset="windows-1252";
    reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <osvaldo.gorosito@village.not-extensia.de>
X-SF-HELO-Domain: 77-85-89-8.btc-net.bg
X-SF-Originating-IP: 77.85.89.8

Don't go to your local chemist's and waste your time!
http://mv.darksidehq.com



Received: from scm.worldindia.com ([208.115.36.20])
        by windows.worldindia.com (Merak 8.0.3) with SMTP id NTA46774
        for <webmaster@worldindia.com>; Sat, 22 Mar 2008 07:03:07 -0400
Received: from 92.113.28.75 by scm.worldindia.com (LogSat Software SMTP Server); Sat, 22 Mar 2008 08:03:01 -0400
Received: from 62.209.45.169 (HELO mail.global.sprint.com)
     by worldindia.com with esmtp ({nChar[8-12]} {nChar[4-6]})
     id 7PCNDv-5k64Z-9Y
     for webmaster@worldindia.com; Sat, 22 Mar 2008 13:03:12 +0200
Message-ID: <193b01c88c0c$520bcb60$c0a8a803@Estela>
From: "Estela Engle" <Estela@rfi.com>
To: "Ladonna Healy" <webmaster@worldindia.com>
Subject: Your ultimate source of fashion
Date: Sat, 22 Mar 2008 13:03:12 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_6457_19A3_01C88C1D.15949B60"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1441
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <jqziruuwlw@rfi.com>
X-SF-HELO-Domain: portofeliz.com.br
X-SF-Originating-IP: 92.113.28.75

This is a multi-part message in MIME format.

------=_NextPart_6457_19A3_01C88C1D.15949B60
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

6824060434

Our rep1!c@s are for people who know how to move today through time and s=
pace with confidence and style!
We will be glad to see you among our customers!
http://cuslrolm=2Ecom/


position in that currency will, because of the lack of liquidity, faceana=
lyzed with such frequency=2E Throughout 1994, Soros searched andplacement=
 of shares in the First Hungary Fund, an equity fund basedIn his bluntest=
 comment in defense of hedge funds, Soros said to
------=_NextPart_6457_19A3_01C88C1D.15949B60
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4=2E0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-=
1">
<META content=3D"MSHTML 6=2E00=2E2800=2E1441" name=3DGENERATOR>
</HEAD>
<BODY><br>45042<br><br>
Our rep1!c@s are for people who know how to move today through time and s=
pace with confidence and style!<br>=20
<a href=3D"http://cuslrolm=2Ecom/">We will be glad to see you among our c=
ustomers!</a><br><br><br>
position in that currency will, because of the lack of liquidity, faceana=
lyzed with such frequency=2E Throughout 1994, Soros searched andplacement=
 of shares in the First Hungary Fund, an equity fund basedIn his bluntest=
 comment in defense of hedge funds, Soros said to<br></BODY></HTML>

------=_NextPart_6457_19A3_01C88C1D.15949B60--


Received: from scm.worldindia.com ([208.115.36.20])
        by windows.worldindia.com (Merak 8.0.3) with SMTP id NTA46774
        for <sushil@worldindia.com>; Sat, 22 Mar 2008 08:35:17 -0400
Received: from 85.178.66.53 by scm.worldindia.com (LogSat Software SMTP Server); Sat, 22 Mar 2008 09:35:11 -0400
Message-Id: <9E6C7F4B-76E1-FD3B-1D4C-C16EC9F5F935@worldindia.com>
From: "ilyas mariucci" <nosflow@256colores.com>
To: sushil@worldindia.com
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v919.2)
Subject: Jessica Alba naked and wet
Date: Sat, 22 Mar 2008 13:35:13 +0100
X-Mailer: Apple Mail (2.919.2)
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <nosflow@256colores.com>
X-SF-HELO-Domain: e178065110.adsl.alicedsl.de
X-SF-Originating-IP: 85.178.66.53

Increase your masculinity and your manliness today.

http://www.tubushsid.com/
Increaes your size and stamina today.

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4065
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 26 March 2008 at 1:08pm
After working with Susheel, we saw that the MAPS RBL and the SURBL server lists were empty, and thus these two filters (both of which are used to stop quite a bit of spam) were not functioning.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.061 seconds.