From: Milton C. <mi...@i-...> - 2007-11-07 21:24:43
|
Hey Chris, Strange since we've only received 5 whitelist requests - , Could you forward the digest of that message, so i can check what the status is in the database. Milton On Nov 7, 2007, at 4:26 AM, Chris wrote: > Noticed this tonight while going through my spam. > >> Received: from localhost by cpollock.localdomain >> with SpamAssassin (version 3.2.3); >> Sun, 04 Nov 2007 19:47:08 -0600 >> From: sni...@se... >> Cc: recipient list not shown: ; >> Subject: =?us-ascii?Q?help=20me=20please?= >> Date: Mon, 05 Nov 2007 02:09:53 +0100 (CET) >> Message-Id: <101...@se...> >> X-Spam-Virus: Yes (Email.Scam4.Gen368.Sanesecurity.06122000) >> X-Spam-Seen: Tokens 99 >> X-Spam-New: Tokens 159 >> X-Spam-Remote: Host localhost.localdomain >> X-Spam-ASN: AS43037 77.75.72.0/23 >> X-Spam-Flag: YES >> X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on > cpollock.localdomain >> X-Spam-Hammy: Tokens 3 >> X-Spam-Status: Yes, score=22.6 required=5.0 >> tests=BAYES_99=5,CLAMAV=10, >> DCC_CHECK=2.17,DIGEST_MULTIPLE=0.001,MISSING_HEADERS=1.292, >> >> RAZOR2_CF_RANGE_51_100 >> =0.5,RAZOR2_CF_RANGE_E4_51_100=1.5,RAZOR2_CHECK=0.5, >> SAGREY=1,SPF_PASS=-0.001,US_DOLLARS_3=0.63 autolearn=disabled > version=3.2.3 >> X-Spam-Spammy: Tokens 24 >> X-Spam-Pyzor: Whitelisted. > > I don't ever remember seeing anything like this before. The above > are scores > from my SA setup, below are the actual message headers: > >> Return-path: <sni...@se...> >> Envelope-to: cpo...@to... >> Delivery-date: Sun, 04 Nov 2007 20:10:03 -0500 >> Received: from mxl.seznam.cz ([77.75.72.44]) >> by linuxsrv01.usdcservers.net with smtp (Exim 4.68) >> (envelope-from <sni...@se...>) >> id 1IoqTT-0008W8-NY >> for cpo...@to...; Sun, 04 Nov 2007 20:10:03 -0500 >> Received: (qmail 16991 invoked by uid 0); 5 Nov 2007 01:09:56 -0000 >> Cc: recipient list not shown: ; >> Date: Mon, 05 Nov 2007 02:09:53 +0100 (CET) >> Reply-To: nel...@ya... >> From: sni...@se... >> Received: from [41.207.201.62] >> by email.seznam.cz with HTTP >> for sni...@se...; >> Mon, 5 Nov 2007 2:09:53 +0100 (CET) >> Subject: =?us-ascii?Q?help=20me=20please?= >> Content-Transfer-Encoding: 7bit >> Content-Type: text/plain; >> charset="us-ascii" >> Mime-Version: 1.0 >> Message-Id: <101...@se...> >> X-Abuse: hel...@se... >> X-Seznam-User: sni...@se... >> X-Spam-Status: No, score=2.7 >> X-Spam-Score: 27 >> X-Spam-Bar: ++ >> X-Spam-Flag: NO >> X-SenderIP: 77.75.72.44 >> X-ASN: ASN-43037 >> X-CIDR: 77.75.72.0/23 > > I take it then that the pyzor servers have whitelisted this server > for some > reason? > > -- > Chris > KeyID 0xE372A7DA98E6705C > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a > browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/_______________________________________________ > pyzor-users mailing list > pyz...@li... > https://lists.sourceforge.net/lists/listinfo/pyzor-users |