Re: Problematic e-mails

Hey,

* Brian Burton wrote on Dec 14, 2005 [09:59, -0500] :

> This sort of spam is highly database dependent.  A given spam might slip
> through for some people and be stopped completely for others.  It all
> depends on the words used by the spammer and their scores in your database.

Since I don't get so many e-mails of that sort, they tend to slip through, and I wonder if the
new release of SpamProbe will be able to cope with them. It seems these messages contain
nothing and hence SpamProbe struggles a bit.

Here is a sample of what I mean.

---BOF---
From [email protected] Sun Dec 18 17:47:16 2005
Return-Path: <[email protected]>
Received: (qmail 64589 invoked from network); 18 Dec 2005 16:05:48 -0000
Received: from mailwash13.pair.com (66.39.2.13)
  by okkod.pair.com with SMTP; 18 Dec 2005 16:05:48 -0000
Received: from localhost (localhost [127.0.0.1])
	by mailwash13.pair.com (Postfix) with SMTP id 35F1157017
	for <[email protected]>; Sun, 18 Dec 2005 11:05:48 -0500 (EST)
Received: from host-213-213-231-8.brutele.be (host-213-213-231-8.brutele.be
    [213.213.231.8])
	by mailwash13.pair.com (Postfix) with ESMTP id D087C5701E
	for <[email protected]>; Sun, 18 Dec 2005 11:05:45 -0500 (EST)
Message-Id: <20051218160545.D087C5701E-/[email protected]>
Date: Sun, 18 Dec 2005 11:05:45 -0500 (EST)
From: [email protected]
To: undisclosed-recipients:;
X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.2 with clamscan / ClamAV
    0.87.1/1212/Sun Dec 18 06:09:50 2005
X-SpamProbe: GOOD 0.5245471 996df546549ad364b1911300f13dd3a1
    Spam Prob   Count    Good    Spam  Word
    0.9999513       2       0      27  Hrecvx_host
    0.0832462       1   36113    1193  good
    0.7696970       1      19     127  good day
    0.7630662       1      34     219  Hto_undisclosed
    0.2776363       1     709     545  Hrecvx_esmtp id
    0.2813559       1     742     581  Hrecvx_with esmtp
    0.2827453       1     742     585  Hrecvx_esmtp
    0.7090887       1    2695   23608  Hfrom_com
    0.3000000       1       0       1  Hfrom_0451.com
    0.3000000       1       0       0  Hfrom_daijacksonv
    0.3000000       1       0       0  Hfrom_daijacksonv 0451.com
    0.3000000       1       0       0  Hrecvx_213.213.231.8
    0.3000000       1       0       0  Hrecvx_213.213.231.8 by
    0.3000000       1       0       0  Hrecvx_35f1157017
    0.3000000       1       0       0  Hrecvx_35f1157017 for
    0.3000000       2       0       0  Hrecvx_brutele
    0.3000000       2       0       0  Hrecvx_brutele.be
    0.3000000       1       0       0  Hrecvx_d087c5701e
    0.3000000       1       0       0  Hrecvx_d087c5701e for
    0.3000000       1       0       0  Hrecvx_from
    host-213-213-231-8.brutele.be
    0.3000000       2       0       0  Hrecvx_host-213-213-231-8.brutele.be
    0.3000000       1       0       0  Hrecvx_host-213-213-231-8.brutele.be
    213.213.231.8
    0.3000000       1       0       0  Hrecvx_host-213-213-231-8.brutele.be
    host-213-213-231-8.brutele.be

Good day!
---EOF---

As you can see, there is no text, except for "Good Day" and no picture. I actually wonder what
the purpose of this mail is.

-- 
Beste Grüße / Best regards ,
Nikolaus Hiebaum


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37&alloc_id865&op=click