View Single Post
  #79  
Old 15th February 2011, 17:02
Turbanator Turbanator is offline
Senior Member
 
Join Date: Jun 2008
Posts: 220
Thanks: 23
Thanked 16 Times in 16 Posts
Default

HEre is on sample that isn't an image spam, but it does represent a huge number that get through...notice the spam tag. And I'll get a bunch in a row from the same fake domain. We manually move these into junk folders and "learn" nightly but I don't think there is enough info for SA to learn anything.

If you want, PM me, and I'll forward one directly to you to see if yours filters.

Code:
+OK 2628 octets follow.
Return-Path: <MAILER-DAEMON>
Delivered-To: me@here.com
Received: from localhost (localhost [127.0.0.1])
	by ns1.heredns.com (Postfix) with ESMTP id BBAFE10B42DC
	for <me@here.com>; Tue, 15 Feb 2011 07:36:41 -0800 (PST)
X-Virus-Scanned: Debian amavisd-new at ns1.heredns.com
X-Spam-Flag: NO
X-Spam-Score: -2.499
X-Spam-Level: 
X-Spam-Status: No, score=-2.499 tagged_above=-100 required=2.88
	tests=[BAYES_00=-2.599, RDNS_NONE=0.1]
Received: from ns1.heredns.com ([127.0.0.1])
	by localhost (ns1.heredns.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id BwsAmpARgQ1p for <me@here.com>;
	Tue, 15 Feb 2011 07:36:41 -0800 (PST)
Received: by ns1.heredns.com (Postfix, from userid 5000)
	id 9A56110B42D8; Tue, 15 Feb 2011 07:36:41 -0800 (PST)
Delivered-To: me@here.com
Received: from localhost (localhost [127.0.0.1])
	by ns1.heredns.com (Postfix) with ESMTP id 8FB5310B42DC
	for <me@here.com>; Tue, 15 Feb 2011 07:36:41 -0800 (PST)
X-Virus-Scanned: Debian amavisd-new at ns1.heredns.com
Received: from ns1.heredns.com ([127.0.0.1])
	by localhost (ns1.heredns.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 4hB6JyN8jwL9 for <me@here.com>;
	Tue, 15 Feb 2011 07:36:41 -0800 (PST)
X-Greylist: delayed 604 seconds by postgrey-1.31 at ns1.heredns.com; Tue, 15 Feb 2011 07:36:41 PST
Received: from gqep.proulseraw.com (unknown [174.36.86.118])
	by ns1.heredns.com (Postfix) with ESMTP id 2766010B42D8
	for <me@here.com>; Tue, 15 Feb 2011 07:36:41 -0800 (PST)
Message-ID: <383399536@gqep.proulseraw.com>
Date: Tue, 15 Feb 2011 09:20:59 -0600
To: <me@here.com>
From: "Karen Miller" <winn@proulseraw.com>
Mime-Version: 1.0
Subject: Earn your share of this $59 billion industry
User-Agent: Cert - OutMode/2.0 tigww/2.73b3
X-Mailer: Firefox / 3.2
Accept-Language: en - us
Content-Language: en - us
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
X-EsetId: 06519D20EC8831375713

Internet Job Locator: #1 site for online jobs


For more information and to view positions click here:
http://gqep.proulseraw.com/2438b36396769379324611396256dab50136a9



Thank you for visiting the Locator















Unsubscribe: http://gqep.proulseraw.com/2438b36396769379324612396256dab50136a9
or send mail to: unsubscribe
2764 N. Green Valley Pkwy Suite 394
Henderson, NV 89014

Click this link to unsubscribe: http://gqep.proulseraw.com/396256dab50136a912438b36396769379
I'll look for an image one and post here as well.
Reply With Quote