email with Passed SPAM
Oberdan Albertoni
obe at digicolor.net
Fri May 27 13:52:37 CEST 2011
Hi I do not understand why despite having a set spam_kill_level = 4.5
this email, with Hits: 4.751
is able to go through the following ta
This is the file log :
May 27 12:26:34 dnsback amavis[16376]: (16376-17) ESMTP::10024
/var/amavis/amavis-20110527T122327-16376: <lilithux at uky.edu> ->
<owner-digicolor-list at digicolor.net>,<prefix0108 at dns.digicolor.net>,<safe120 at dns.digicolor.net>,<safe397 at dns.digicolor.net>,<salino40 at dns.digicolor.net>,<scivac12 at dns.digicolor.net>,<scrfced at dns.digicolor.net>
SIZE=4517 Received: from dns.digicolor.net ([80.76.85.146]) by localhost
(dns.digicolor.net [80.76.85.147]) (amavisd-new, port 10024) with ESMTP;
Fri, 27 May 2011 12:26:34 +0200 (CEST)
May 27 12:26:35 dnsback amavis[16376]: (16376-17) Checking: cGnF8x6Ij6r4
[41.140.27.151] <lilithux at uky.edu> ->
<owner-digicolor-list at digicolor.net>,<prefix0108 at dns.digicolor.net>,<safe120 at dns.digicolor.net>,<safe397 at dns.digicolor.net>,<salino40 at dns.digicolor.net>,<scivac12 at dns.digicolor.net>,<scrfced at dns.digicolor.net>
May 27 12:26:36 dnsback amavis[16376]: (16376-17) SPAM,
<lilithux at uky.edu> ->
<owner-digicolor-list at digicolor.net>,<prefix0108 at dns.digicolor.net>,<safe120 at dns.digicolor.net>,<safe397 at dns.digicolor.net>,<salino40 at dns.digicolor.net>,<scivac12 at dns.digicolor.net>,<scrfced at dns.digicolor.net>,
Yes, score=4.751 tag=2 tag2=3 kill=4.5 tests=[BAYES_50=0.8,
HTML_MESSAGE=0.001, RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_PBL=1.5,
RDNS_NONE=1, RFC_ABUSE_POST=0.001] autolearn=no
May 27 12:26:36 dnsback amavis[16376]: (16376-17) SPAM-TAG,
<lilithux at uky.edu> -> <owner-digicolor-list at digicolor.net>, Yes,
score=4.751 tagged_above=2 required=4.5 tests=[BAYES_50=0.8,
HTML_MESSAGE=0.001, RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_PBL=1.5,
RDNS_NONE=1, RFC_ABUSE_POST=0.001] autolearn=no
May 27 12:26:36 dnsback amavis[16376]: (16376-17) FWD via SMTP:
<lilithux at uky.edu> -> <owner-digicolor-list at digicolor.net>, 250 2.0.0
from MTA([80.76.85.146]:10025): 250 2.0.0 Ok: queued as C429D609269
May 27 12:26:37 dnsback amavis[16376]: (16376-17) FWD via SMTP:
<lilithux at uky.edu> -> <scivac12 at dns.digicolor.net>, 250 2.0.0 from
MTA([80.76.85.146]:10025): 250 2.0.0 Ok: queued as EEF426092D2
May 27 12:26:37 dnsback amavis[16376]: (16376-17) Passed SPAM,
[41.140.27.151] [41.140.27.151] <lilithux at uky.edu> ->
<owner-digicolor-list at digicolor.net>,<scivac12 at dns.digicolor.net>,
Message-ID: <4DDF7BA6.301030 at uky.edu>, mail_id: cGnF8x6Ij6r4, Hits:
4.751, size: 4510, queued_as: C429D609269/EEF426092D2, Subject:
"Cronometri di marchio ai prezzi bassi", From:
"Belinda_Lynn"_<lilithux at uky.edu>, User-Agent:
Mozilla/5.0_(Windows;_U;_Windows_NT_5.1;_en-US;_rv:1.9.2.9)_Gecko/20100921_Thunderbird/3.1.4,
Tests:
[BAYES_50=0.8,HTML_MESSAGE=0.001,RCVD_IN_BRBL_LASTEXT=1.449,RCVD_IN_PBL=1.5,RDNS_NONE=1,RFC_ABUSE_POST=0.001],
autolearn=no, 2123 ms
May 27 12:26:37 dnsback amavis[16376]: (16376-17) Blocked SPAM,
[41.140.27.151] [41.140.27.151] <lilithux at uky.edu> ->
<prefix0108 at dns.digicolor.net>,<safe120 at dns.digicolor.net>,<safe397 at dns.digicolor.net>,<salino40 at dns.digicolor.net>,<scrfced at dns.digicolor.net>,
Message-ID: <4DDF7BA6.301030 at uky.edu>, mail_id: cGnF8x6Ij6r4, Hits:
4.751, size: 4510, Subject: "Cronometri di marchio ai prezzi bassi",
From: "Belinda_Lynn"_<lilithux at uky.edu>, User-Agent:
Mozilla/5.0_(Windows;_U;_Windows_NT_5.1;_en-US;_rv:1.9.2.9)_Gecko/20100921_Thunderbird/3.1.4,
Tests:
[BAYES_50=0.8,HTML_MESSAGE=0.001,RCVD_IN_BRBL_LASTEXT=1.449,RCVD_IN_PBL=1.5,RDNS_NONE=1,RFC_ABUSE_POST=0.001],
autolearn=no, 2123 ms
and this is the header of the email :
From - Fri May 27 12:29:28 2011
X-Account-Key: account2
X-UIDL: 1202998252.215019
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:<lilithux at uky.edu>
Received: from murder ([unix socket])
by dns.digicolor.net (Cyrus v2.3.11) with LMTPA;
Fri, 27 May 2011 12:26:45 +0200
X-Sieve: CMU Sieve 2.3
Received: from localhost (dnsback.digicolor.net [80.76.85.147])
by dns.digicolor.net (Postfix) with ESMTP id C429D609269
for<owner-digicolor-list at digicolor.net>; Fri, 27 May 2011 12:26:44 +0200 (CEST)
X-Virus-Scanned: amavisd-new at digicolor.net
X-Spam-Flag: YES
X-Spam-Score: 4.751
X-Spam-Level: ****
X-Spam-Status: Yes, score=4.751 tagged_above=2 required=4.5
tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, RCVD_IN_BRBL_LASTEXT=1.449,
RCVD_IN_PBL=1.5, RDNS_NONE=1, RFC_ABUSE_POST=0.001] autolearn=no
Received: from dns.digicolor.net ([80.76.85.146])
by localhost (dns.digicolor.net [80.76.85.147]) (amavisd-new, port 10024)
with ESMTP id cGnF8x6Ij6r4; Fri, 27 May 2011 12:26:34 +0200 (CEST)
Received: from [41.140.27.151] (unknown [41.140.27.151])
by dns.digicolor.net (Postfix) with ESMTP id DBEF1609586;
Fri, 27 May 2011 12:26:42 +0200 (CEST)
Received: from (192.168.1.186) by uky.edu (41.140.27.151) with Microsoft SMTP Server id 8.0.685.24; Fri, 27 May 2011 11:26:41 +0100
Message-ID:<4DDF7BA6.301030 at uky.edu>
Date: Fri, 27 May 2011 11:26:41 +0100
From: "Belinda Lynn"<lilithux at uky.edu>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.9) Gecko/20100921 Thunderbird/3.1.4
MIME-Version: 1.0
To:<cms.interflumina at digicolor.net>,
<salino40 at digicolor.net>,
<polledri at digicolor.net>,
<sante at digicolor.net>,
<saneco at digicolor.net>,
<owner-digicolor-list at digicolor.net>,
<owner-oxxxa-list at digicolor.net>,
<owner-vetlink-list at digicolor.net>,
<scrfced at digicolor.net>,
<scivac12 at digicolor.net>
Subject: ***SPAM*** Cronometri di marchio ai prezzi bassi
Content-Type: multipart/alternative;
boundary="------------04030800507090607030502"
This is a multi-part message in MIME format.
--------------04030800507090607030502
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Basta pagare le somme intollerabili per cio che puoi comprare per prezzi bassisimi con nostri cronografi.
--------------04030800507090607030502
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
By Obe.
--
Oberdan Albertoni
-----------------------------------------------------------------------------------------------------------------------------------------------------------
DIGICOLOR.NET s.r.l. Via Ala Ponzone, 30 - 26100 CREMONA (CR) Tel. +39 (0372) 30669 - 1965101 - 1951509
Fax +39 (0372) 464840 E-mail info at digicolor.net - Website http://www.digicolor.net
C.F / P.IVA 01227520192 - R.E.A. CR n. 153382 - Capitale Sociale € 10.400 i.v.
Filiale di Codogno
Via Galilei, 17 – 26845 CODOGNO (LO) Tel. +39 (0377) 741006 – 431931 Fax +39 (0372) 464840
E-mail info.codogno at digicolor.net - Website http://www.digicolor.net
-----------------------------------------------------------------------------------------------------------------------------------------------------------
Ai sensi del D.lgs n.196 del 30.06.03 (Codice Privacy) si precisa che le informazioni contenute in questo messaggio sono riservate e ad uso esclusivo
del destinatario. Qualora il messaggio in parola Le fosse pervenuto per errore, La preghiamo di eliminarlo senza copiarlo e di non inoltrarlo a
terzi, dandocene gentilmente comunicazione. Grazie
This message, for the D.lgs n.196 / 30.06.03 (Privacy Code), may contain confidential and/or privileged information. If you are not the addressee or
authorized to receive this for the addressee, you must not use, copy, disclose or take any action based on this message or any information herein.
If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation.
-----------------------------------------------------------------------------------------------------------------------------------------------------------
More information about the amavis-users
mailing list