Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: SpamAssassin: users

Spam coming from hotmail.

 

 

SpamAssassin users RSS feed   Index | Next | Previous | View Threaded


tcasartello at wsc

Nov 9, 2009, 4:56 AM

Post #1 of 2 (508 views)
Permalink
Spam coming from hotmail.

I've been getting a lot of non-scoring spam coming from hotmail over the
last couple weeks. It's one user that's been complaining about it.

Here's a few samples:



From: Jeffry Mouswen [mailto:jmouswenfiiw [at] hotmail]
Sent: Monday, November 09, 2009 12:27 AM
To: morse [at] csus; nightmareofdreams [at] gmail
Cc: <user's name removed>
Subject: Interested in it



What you up to,

I just felt compelled to communicate to you about the brilliant new way I
buy my pharmaceuticals.

I found this virtual distributor at http://LudovicLen.insanejournal.com and
I believed that you could use it too. They use the right amount of
judiciousness and trade in identical items as at your SavOn.

It'll be great when you guys finally purchase their reasonably-priced stuff!

See you soon,
Ronin

_____

Hotmail: Trusted email with Microsoft's powerful SPAM protection. Sign up
now.
<http://clk.atdmt.com/GBL/go/177141664/direct/01/%0d%0ahttp:/clk.atdmt.com/G
BL/go/177141664/direct/01/%0d%0a>





From: shebrome ascange [mailto:ashebromefuqat [at] hotmail]
Sent: Friday, November 06, 2009 10:08 PM
To: marsik555 [at] msn; <user's name removed>; stacyberger [at] yahoo;
farmbabe66 [at] hotmail
Cc: davedebbiealexboyd [at] msn
Subject: U finished it again



Howdy!

I just was dying to write you about the brilliant new manner in which I get
a hold of my medicine.

I discovered this cyber dispensary at http://denyounvid.spaces.live.com and
I could tell that you could use it too. They use the correct amount of care
and have indistinguishable medicines as at your SavOn.

It'll be a blast when you guys finally obtain their first-rate medications!

Talk to you really soon,
Tomoyuki

_____

Find the right PC with Windows 7 and Windows Live. Learn more.
<http://www.microsoft.com/Windows/pc-scout/laptop-set-criteria.aspx?cbid=wl&
filt=200,2400,10,19,1,3,1,7,50,650,2,12,0,1000&cat=1,2,3,4,5,6&brands=5,6,7,
8,9,10,11,12,13,14,15,16&addf=4,5,9&ocid=PID24727::T:WLMTAGL:ON:WL:en-US:WWL
_WIN_evergreen2:112009>





From: silonoho erahofonw [mailto:serahofonwarjkc [at] hotmail]
Sent: Saturday, November 07, 2009 1:57 AM
To: dillbert2953 [at] yahoo; <user's name removed>
Cc: boocf [at] yahoo; ayers [at] aol
Subject: Happy



Hi,

I stumbled across this online shop at http://6yo.org/s/?QOREQ and I was
positive that you could use it too. They have the correct amount of privacy
and sell equivocal medications as at your area store.

_____

Hotmail: Trusted email with powerful SPAM protection. Sign up
<http://clk.atdmt.com/GBL/go/177141665/direct/01/> now.



From: stuhanst bbigelart [mailto:bbigelartscruzk [at] hotmail]
Sent: Tuesday, November 03, 2009 1:00 PM
To: davidwray1 [at] hotmail
Subject: Thank ya



I just ended a phone call with my co-worker, who says "hi," and she wanted
to talk with us about a wicked site she wants us to try. She disclosed to me
that this site boasts an unmatched supply and nice prices that dishonor our
area vendor!

Don't even say that you don't hate paying too much for your medicines as
much as I'm aware that you do. Well our answer is right there on the web at
http://jeenpeul.livejournal.com This internet supplier is totally reputable
and safe. He was the marketing and sales strategist behind many of
Microsoft's software deals. Their

While the imperial powers in Africa prospered off of the raw materials of
the land and slavery (economic values), the African natives suff

To your health!
Rioun

_____

Hotmail: Trusted email with Microsoft's powerful SPAM protection. Sign up
now.
<http://clk.atdmt.com/GBL/go/177141664/direct/01/%0d%0ahttp:/clk.atdmt.com/G
BL/go/177141664/direct/01/%0d%0a>





From: asthog alhora [mailto:asthogainuxf [at] hotmail]
Sent: Monday, November 02, 2009 3:04 PM
To: aaronragsdale [at] yahoo
Subject: All the possibilities



I just finished chatting with my girlfriend, who says "hi," and she wanted
to talk with us about a great shop she heard about. She told me that this
virtual store shows a wide variety and fair prices that dishonor our
neighborhood outlet!

Don't even act like you don't dislike getting ripped off for your drugs as
much as I am sure you do. Well our cure is right there in cyberspace at
http://bingperkin.livejournal.com This cyber location is totally reputable
and safe. software became the industry standard in the early 1980s and has
just increased in distribution

ered from political and economic situations. Politically, most African
Empires were emerging through new military technology and religious

Let me know how it goes!
Rouppoun

_____

New Windows 7: Find the right PC for you. Learn more.
<http://www.microsoft.com/windows/pc-scout/default.aspx?CBID=wl&ocid=PID2472
7::T:WLMTAGL:ON:WL:en-US:WWL_WIN_pcscout:112009>





Thomas E. Casartello, Jr.

Staff Assistant - Wireless/Linux Administrator

Information Technology

Wilson 105A

Westfield State College

(413) 572-8245



Red Hat Certified Technician (RHCT)
Attachments: smime.p7s (4.09 KB)


me at junc

Nov 9, 2009, 10:20 AM

Post #2 of 2 (464 views)
Permalink
Re: Spam coming from hotmail. [In reply to]

On man 09 nov 2009 13:56:27 CET, "Casartello, Thomas" wrote
> Hotmail: Trusted email with Microsoft's powerful SPAM protection. Sign up
> now.

why not enable it ?

but for others:

give a big spam score for rfc-i
give a big ham score for users at hotmail that does not spam you

meta RFC_ABUSE_POST (__DNS_FROM_RFC_ABUSE && __DNS_FROM_RFC_POST)
describe RFC_ABUSE_POST Meta: both abuse and postmaster missing on
sender domain
score RFC_ABUSE_POST 2.0

meta __SPF_MATCH (USER_IN_DEF_SPF_WL || USER_IN_SPF_WHITELIST)
meta __DKIM_MATCH (USER_IN_DEF_DKIM_WL || USER_IN_DKIM_WHITELIST)

meta URI_NOT_WHITELISTED (__HAS_ANY_URI && !__SPF_MATCH && !__DKIM_MATCH)
describe URI_NOT_WHITELISTED Meta: URI found but none are WHITE
score URI_NOT_WHITELISTED 1.1

whitelist_from_auth foo [at] hotmail

score USER_IN* -5.0

--
xpoint

SpamAssassin users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.