🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: ch.admin
Article #5717

Re: [UCE] Swiss (Socken) Spammer

#5717
From: Alex Broens
Date: Sun, 25 Apr 2004 09:13
103 lines
5478 bytes
Naja..

Spamasassin rule:
-------------
rawbody  sox1 /\bBitte Talon ausdrucken und einsenden oder faxen an\b/i
describe sox1    damm sox
score    sox1    20.0
-------------

"Michel Graedel" <expire.april.04@policy.ch> wrote in message
news:pan.2004.04.24.23.21.37.432499@policy.ch...
| Hegi Mafia :-\
|
| Wenigstens eines wurde von Brightmail erkannt.
| Mal sehen ob ich die Erkennungsrate dort und bei Spamcop steigern kann.
|
| Ueber uns und Sunrise versendet.
| Beginnt Hegi nun Proxys zu verwenden?
|
| Dass *koennte* jetzt der Fehler gewesen sein, den er oder seine Azubis
| besser nicht gemacht haetten.
|
| Mal sehen... Am Montag arbeite ich ja wieder :-)
|
| m.
|
| Nr.1
|
| Return-Path:  <tuchnummer1@toosexyforyou.com>
| Received:  from c60.cesmail.net (216.154.195.49) by marvin.policy.ch
(policy.ch mail service 6.7.021) id 40224DEC00006E6B for
wh21nswfvqb7@policy.ch; Sat, 24 Apr 2004 22:58:29 +0200
| Received:  from unknown (HELO blade4.cesmail.net) (192.168.1.214) by
c60.cesmail.net with SMTP; 24 Apr 2004 16:58:31 -0400
| Received:  (qmail 13685 invoked by uid 1010); 24 Apr 2004 20:58:31 -0000
| Delivered-To:  nobody@spamcop.net
| Received:  (qmail 13528 invoked from network); 24 Apr 2004 20:58:24 -0000
| Received:  from unknown (192.168.1.101) by blade4.cesmail.net with QMQP;
24 Apr 2004 20:58:24 -0000
| Received:  from mail2.bluewin.ch (195.186.4.73) by mailgate.cesmail.net
with SMTP; 24 Apr 2004 20:58:24 -0000
| Received:  from mssazhb-int.msg.bluewin.ch (195.186.1.230) by
mail2.bluewin.ch (Bluewin AG 7.0.027) id 40559C2000697DAE for
mczap@spamcop.net; Sat, 24 Apr 2004 20:58:23 +0000
| Delivered-To:  null@bluewin.ch
| Received:  from mx9.bluewin.ch (172.21.1.119) by
mssazhb-int.msg.bluewin.ch (Bluewin AG 7.0.027) id 4057CA7002CEC978; Sat, 24
Apr 2004 20:58:23 +0000
| Received:  from mydiax.ch (194.230.148.242) by mx9.bluewin.ch (Bluewin AG
7.0.027) id 4056CC5400DCB053; Sat, 24 Apr 2004 20:58:21 +0000
| Message-ID:  <4056CC5400DCB053@mx9.bluewin.ch> (added by
postmaster@bluewin.ch)
| From: tuchnummer1@toosexyforyou.com
| Subject: Flauschtuecher zum Superpreis!
| Date: Sa, 24 Apr 2004 19:25:27
| X-Spam-Checker-Version:  SpamAssassin 2.63 (2004-01-11) on blade4
| X-Spam-Level:
| X-Spam-Status:  hits=0.3 tests=NO_REAL_NAME version=2.63
| X-SpamCop-Checked:  192.168.1.101 195.186.4.73 195.186.1.230 172.21.1.119
194.230.148.242
| X-Evolution-Source:  pop://wh21nswfvqb7;auth=CRAM-MD5@marvin.policy.ch
| Mime-Version:  1.0
|
| 2.
|
| Return-Path:  <badetuecher@quackquack.com>
| X-Brightmail:  Suspected Spam
| Received:  from c60.cesmail.net (216.154.195.49) by marvin.policy.ch
(policy.ch mail service 6.7.021) id 40224DEC00006E6E for
wh21nswfvqb7@policy.ch; Sat, 24 Apr 2004 23:09:01 +0200
| Received:  from unknown (HELO blade2.cesmail.net) (192.168.1.212) by
c60.cesmail.net with SMTP; 24 Apr 2004 17:09:02 -0400
| Received:  (qmail 21278 invoked by uid 1010); 24 Apr 2004 21:09:02 -0000
| Delivered-To:  nobody@spamcop.net
| Received:  (qmail 21209 invoked from network); 24 Apr 2004 21:08:56 -0000
| Received:  from unknown (192.168.1.101) by blade2.cesmail.net with QMQP;
24 Apr 2004 21:08:56 -0000
| Received:  from mail6.bluewin.ch (195.186.4.229) by mailgate.cesmail.net
with SMTP; 24 Apr 2004 21:08:56 -0000
| Received:  from mssazhh-int.msg.bluewin.ch (195.186.1.230) by
mail6.bluewin.ch (Bluewin AG 7.0.027) id 4055A1BD006B5E17 for
mczap@spamcop.net; Sat, 24 Apr 2004 21:08:55 +0000
| Delivered-To:  null@bluewin.ch
| Received:  from mx4.bluewin.ch (172.21.1.114) by
mssazhh-int.msg.bluewin.ch (Bluewin AG 7.0.027) id 40727AD3014CB07F; Sat, 24
Apr 2004 21:08:55 +0000
| Received:  from bluewin.ch (213.3.192.12) by mx4.bluewin.ch (Bluewin AG
7.0.027) id 4055A63A0154F9D8; Sat, 24 Apr 2004 21:08:54 +0000
| Message-ID:  <4055A63A0154F9D8@mx4.bluewin.ch> (added by
postmaster@bluewin.ch)
| From: badetuecher@quackquack.com
| Subject: 1A-Frottiertuecher zum Hammerpreis!
| Date: Sa, 24 Apr 2004 19:32:53
| X-Spam-Checker-Version:  SpamAssassin 2.63 (2004-01-11) on
blade2.cesmail.net
| X-Spam-Level:
| X-Spam-Status:  hits=0.3 tests=NO_REAL_NAME version=2.63
| X-SpamCop-Checked:  192.168.1.101 195.186.4.229 195.186.1.230 172.21.1.114
213.3.192.12
| X-Evolution-Source:  pop://wh21nswfvqb7;auth=CRAM-MD5@marvin.policy.ch
| Mime-Version:  1.0
|
|
Technical Details
Message-ID: <c6fvgn$cob$1@newshispeed.ch>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!fu-berlin.de!news.sirdir.ch!news.hispeed.ch!not-for-mail
References: <pan.2004.04.24.23.21.37.432499@policy.ch>

Show Full Headers
Complete Article Headers
X-Google-Language: GERMAN,ASCII-7-bit
X-Google-Thread: 11008d,62cf3900e054a703,start
X-Google-Attributes: gid11008d,public
X-Google-ArrivalTime: 2004-04-25 02:15:03 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!fu-berlin.de!news.sirdir.ch!news.hispeed.ch!not-for-mail
From: "Alex Broens" <no-mail@plea.se>
Newsgroups: ch.admin
Subject: Re: [UCE] Swiss (Socken) Spammer
Date: Sun, 25 Apr 2004 11:13:59 +0200
Organization: Cablecom Newsserver
Lines: 104
Message-ID: <c6fvgn$cob$1@newshispeed.ch>
References: <pan.2004.04.24.23.21.37.432499@policy.ch>
Reply-To: "Alex Broens" <only@the.group>
NNTP-Posting-Host: inet.alexb.ch
Mime-Version: 1.0
Content-Type: text/plain;
 charset="iso-8859-15"
Content-Transfer-Encoding: 7bit
X-Trace: newshispeed.ch 1082884439 13067 62.2.214.115 (25 Apr 2004 09:13:59 GMT)
X-Complaints-To: news@hispeed.ch
NNTP-Posting-Date: Sun, 25 Apr 2004 09:13:59 +0000 (UTC)
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165