Print Page | Close Window

Certain spams passing through

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6442
Printed Date: 09 May 2025 at 1:30pm


Topic: Certain spams passing through
Posted By: susheel
Subject: Certain spams passing through
Date Posted: 22 March 2008 at 10:29am
Roberto et all,

There are certain one line spams which are passing through for Spam Filter for a long time and frustrating my clients. Please give me a solution to get rid of these. Sample headers are for your reference :

Received: from scm.worldindia.com ([208.115.36.20])
        by windows.worldindia.com (Merak 8.0.3) with SMTP id NTA46774
        for <susheel@worldindia.com>; Sat, 22 Mar 2008 08:51:53 -0400
Received: from 77.85.89.8 by scm.worldindia.com (LogSat Software SMTP Server); Sat, 22 Mar 2008 09:51:47 -0400
Received: from [116.222.130.27] (helo=ruf)
    by 77-85-89-8.btc-net.bg with smtp (Exim 4.62 (FreeBSD))
    id 1K"0E"-0007aX-Eu; Sat, 22 Mar 2008 14:53:05 +0200
Message-ID: <002f01c88c1b$7d751590$1b82de74@ruf>
From: <osvaldo.gorosito@village.not-extensia.de>
To: <susheel@worldindia.com>
Subject: Tired of a small Pe?
Date: Sat, 22 Mar 2008 14:51:47 +0200
MIME-Version: 1.0
Content-Type: text/plain;
    format=flowed;
    charset="windows-1252";
    reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <osvaldo.gorosito@village.not-extensia.de>
X-SF-HELO-Domain: 77-85-89-8.btc-net.bg
X-SF-Originating-IP: 77.85.89.8

Don't go to your local chemist's and waste your time!
http://mv.darksidehq.com



Received: from scm.worldindia.com ([208.115.36.20])
        by windows.worldindia.com (Merak 8.0.3) with SMTP id NTA46774
        for <webmaster@worldindia.com>; Sat, 22 Mar 2008 07:03:07 -0400
Received: from 92.113.28.75 by scm.worldindia.com (LogSat Software SMTP Server); Sat, 22 Mar 2008 08:03:01 -0400
Received: from 62.209.45.169 (HELO mail.global.sprint.com)
     by worldindia.com with esmtp ({nChar[8-12]} {nChar[4-6]})
     id 7PCNDv-5k64Z-9Y
     for webmaster@worldindia.com; Sat, 22 Mar 2008 13:03:12 +0200
Message-ID: <193b01c88c0c$520bcb60$c0a8a803@Estela>
From: "Estela Engle" <Estela@rfi.com>
To: "Ladonna Healy" <webmaster@worldindia.com>
Subject: Your ultimate source of fashion
Date: Sat, 22 Mar 2008 13:03:12 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_6457_19A3_01C88C1D.15949B60"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1441
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <jqziruuwlw@rfi.com>
X-SF-HELO-Domain: portofeliz.com.br
X-SF-Originating-IP: 92.113.28.75

This is a multi-part message in MIME format.

------=_NextPart_6457_19A3_01C88C1D.15949B60
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

6824060434

Our rep1!c@s are for people who know how to move today through time and s=
pace with confidence and style!
We will be glad to see you among our customers!
http://cuslrolm=2Ecom/


position in that currency will, because of the lack of liquidity, faceana=
lyzed with such frequency=2E Throughout 1994, Soros searched andplacement=
 of shares in the First Hungary Fund, an equity fund basedIn his bluntest=
 comment in defense of hedge funds, Soros said to
------=_NextPart_6457_19A3_01C88C1D.15949B60
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4=2E0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-=
1">
<META content=3D"MSHTML 6=2E00=2E2800=2E1441" name=3DGENERATOR>
</HEAD>
<BODY><br>45042<br><br>
Our rep1!c@s are for people who know how to move today through time and s=
pace with confidence and style!<br>=20
<a href=3D"http://cuslrolm=2Ecom/">We will be glad to see you among our c=
ustomers!</a><br><br><br>
position in that currency will, because of the lack of liquidity, faceana=
lyzed with such frequency=2E Throughout 1994, Soros searched andplacement=
 of shares in the First Hungary Fund, an equity fund basedIn his bluntest=
 comment in defense of hedge funds, Soros said to<br></BODY></HTML>

------=_NextPart_6457_19A3_01C88C1D.15949B60--


Received: from scm.worldindia.com ([208.115.36.20])
        by windows.worldindia.com (Merak 8.0.3) with SMTP id NTA46774
        for <sushil@worldindia.com>; Sat, 22 Mar 2008 08:35:17 -0400
Received: from 85.178.66.53 by scm.worldindia.com (LogSat Software SMTP Server); Sat, 22 Mar 2008 09:35:11 -0400
Message-Id: <9E6C7F4B-76E1-FD3B-1D4C-C16EC9F5F935@worldindia.com>
From: "ilyas mariucci" <nosflow@256colores.com>
To: sushil@worldindia.com
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v919.2)
Subject: Jessica Alba naked and wet
Date: Sat, 22 Mar 2008 13:35:13 +0100
X-Mailer: Apple Mail (2.919.2)
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <nosflow@256colores.com>
X-SF-HELO-Domain: e178065110.adsl.alicedsl.de
X-SF-Originating-IP: 85.178.66.53

Increase your masculinity and your manliness today.

http://www.tubushsid.com/
Increaes your size and stamina today.




Replies:
Posted By: LogSat
Date Posted: 26 March 2008 at 1:08pm
After working with Susheel, we saw that the MAPS RBL and the SURBL server lists were empty, and thus these two filters (both of which are used to stop quite a bit of spam) were not functioning.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP



Print Page | Close Window