cougarmaster
9th July 2009, 17:15
Please help been trying to firgure out how to remove the header from all the spam marked emails. I dont want to see the following :-
From: "Terri Tjxipo" <umesh@sigcl.com>
To: umesh@sigcl.com
Subject: SPAM: Results of your tests
Date: Thu, 9 Jul 2009 02:39:55 -0500
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on isp.sigcl.com
X-Spam-Level: *************
X-Spam-Status: Yes, score=13.5 required=5.0 tests=FH_HELO_EQ_D_D_D_D,
HELO_DYNAMIC_DHCP,HELO_DYNAMIC_IPADDR,HTML_MESSAGE ,MIME_HTML_ONLY,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RDNS_NONE ,URIBL_BLACK autolearn=spam
version=3.2.5
Spam detection software, running on the system "isp.sigcl.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Sexual Health Newsletter. If you are having problems viewing
images in this e-mail, click here to view it in your web browser. July 2009:
Daily Newsletter Goto website > [...]
Content analysis details: (13.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
0.5 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d
2.9 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
0.0 HTML_MESSAGE BODY: HTML included in message
1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see < http://www.spamcop.net/bl.shtml?201.103.47.46>]
1.6 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[201.103.47.46 listed in dnsbl.sorbs.net]
3.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: fvoyavok.cn]
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
Return-Path: <umesh@sigcl.com>
X-Original-To: umesh@sigcl.com
Delivered-To: sigcl.umesh@isp.sigcl.com
Received: from dsl-201-103-87-104-dyn.prod-infinitum.com.mx (unknown [201.103.47.46])
by isp.sigcl.com (Postfix) with ESMTP id 32B3936A462
for <umesh@sigcl.com>; Thu, 9 Jul 2009 07:39:57 +0000 (UTC)
Content-type: text/html; charset="utf-8"
MIME-Version: 1.0
Message-ID: <7873AD.803805C4.3846083192524CCXGBDUYRKAROUU7865@d sl-201-103-87-104-dyn.prod-infinitum.com.mx>
Date: Thu, 9 Jul 2009 02:39:55 -0500
From: "Terri Tjxipo" <umesh@sigcl.com>
To: umesh@sigcl.com
Subject: Results of your tests
X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.4 with clamscan / ClamAV 0.95.1/9549/Wed Jul 8 18:14:06 2009
please help and also why is clamAV renaming my xls and other images files?
Tks in advance pls help getting tired .....
From: "Terri Tjxipo" <umesh@sigcl.com>
To: umesh@sigcl.com
Subject: SPAM: Results of your tests
Date: Thu, 9 Jul 2009 02:39:55 -0500
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on isp.sigcl.com
X-Spam-Level: *************
X-Spam-Status: Yes, score=13.5 required=5.0 tests=FH_HELO_EQ_D_D_D_D,
HELO_DYNAMIC_DHCP,HELO_DYNAMIC_IPADDR,HTML_MESSAGE ,MIME_HTML_ONLY,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RDNS_NONE ,URIBL_BLACK autolearn=spam
version=3.2.5
Spam detection software, running on the system "isp.sigcl.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Sexual Health Newsletter. If you are having problems viewing
images in this e-mail, click here to view it in your web browser. July 2009:
Daily Newsletter Goto website > [...]
Content analysis details: (13.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
0.5 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d
2.9 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
0.0 HTML_MESSAGE BODY: HTML included in message
1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see < http://www.spamcop.net/bl.shtml?201.103.47.46>]
1.6 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[201.103.47.46 listed in dnsbl.sorbs.net]
3.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: fvoyavok.cn]
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
Return-Path: <umesh@sigcl.com>
X-Original-To: umesh@sigcl.com
Delivered-To: sigcl.umesh@isp.sigcl.com
Received: from dsl-201-103-87-104-dyn.prod-infinitum.com.mx (unknown [201.103.47.46])
by isp.sigcl.com (Postfix) with ESMTP id 32B3936A462
for <umesh@sigcl.com>; Thu, 9 Jul 2009 07:39:57 +0000 (UTC)
Content-type: text/html; charset="utf-8"
MIME-Version: 1.0
Message-ID: <7873AD.803805C4.3846083192524CCXGBDUYRKAROUU7865@d sl-201-103-87-104-dyn.prod-infinitum.com.mx>
Date: Thu, 9 Jul 2009 02:39:55 -0500
From: "Terri Tjxipo" <umesh@sigcl.com>
To: umesh@sigcl.com
Subject: Results of your tests
X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.4 with clamscan / ClamAV 0.95.1/9549/Wed Jul 8 18:14:06 2009
please help and also why is clamAV renaming my xls and other images files?
Tks in advance pls help getting tired .....