[Mimedefang] Missed Spam

Will McCorkle WMcCorkle at dgsystems.com
Mon Aug 11 17:16:01 EDT 2003


Hello Everyone,

We here recently had a rash of spam come in that was not tested by SA. I was
wondering if anyone has seen this kind of problem before. SA is running fine
and has been catching everything we want to stop. I have add the source of
the email as well as the header and what my log shows concerning the email.
Any help would be appreciated.

Log:
Aug 11 13:44:07 myserver sm-mta[21599]: h7BIi6Rg021599:
from=<iaudio at myserver.com>, size=2054, class=0, nrcpts=1, msgid=<163431634
3ldxglrCgjv|vwhpv1frp at 24.98.43.68>, proto=SMTP, daemon=MTA,
relay=c-24-98-43-68.atl.client2.attbi.com [24.98.43.68]
Aug 11 13:44:07 myserver sm-mta[21599]: h7BIi6Rg021599: Milter add: header:
X-Scanned-By: MIMEDefang 2.30 (www . roaringpenguin . c
om / mimedefang)
Aug 11 13:44:08 myserver sm-mta[21603]: h7BIi6Rg021599:
to=<iaudio at myserver.com>, delay=00:00:01, xdelay=00:00:01, mailer=smtp, pr
i=30544, relay=look.myserver.com. [10.1.1.75], dsn=2.0.0, stat=Sent (OK)

Header and test:
Received: from aemail4u.com ([117.117.117.117]) by aemail4u.com
(8.9.3/8.9.3) with SMTP id 16343 for <iaudio at myserver.com>; Mon, 11 Aug 2003
14:44:21 -0400
Message-ID: <1634316343ldxglrCgjv|vwhpv1frp at 24.98.43.68>
Received: from [117.117.117.117] by web16343.mail.yahoo.com via HTTP; Mon,
11 Aug 2003 14:44:21 -0400
From: "SOGP" <iaudio at yahoo.com>
To: "iaudio" <iaudio at myserver.com>
Date: Mon, 11 Aug 2003 14:44:16 -0400
Subject: yo-yo
MIME-Version: 1.0
Content-Type: multipart/related;
  boundary="----=_NextPart_000_0007_3FD73FD7.3FD73FD7"
X-Scanned-By: MIMEDefang 2.30 (www . roaringpenguin . com / mimedefang)

------=_NextPart_000_0007_3FD73FD7.3FD73FD7
Content-Type: text/html;
Content-Transfer-Encoding: base64

HTML sorce:
<html><!16343>
<BODY bgcolor="#000033" text="#FFCC00">
<p align="center"><font face="Arial" size="3" color="#FF0000"><b><font
size="5">HARDCORE OFFICE SEX!</font></b></font><font color="#FFCC00"
size="5"></font></p>
<p align="center"><font color="#FF990016343"><font size="4">-Hi<!16343>gh
cl<!16343>ass Slu<!16343>ts!</font></font><br><font color="#FF6600"
size="4">
-See 1000s of ho<!16343>t, you<!16343>ng and horny <br>secre<!16343>taries
gett<!16343>ing fuc<!16343>ked at the office!</font></p>
<p align="center" ><strong><br><font color="#FF990016343" size="5">
-</font><font size="5">Absolu<!16343>tely
Fr<!16343>ee!</font><br></strong></p><div align="center">
<p><a href="http://211.41.246.68/dmadhhs.html"><!16343><font color="#FFFFFF"
size="6">Go to ac<!16343>tlo<!16343>n<!16343>!<!16343><br>
Y<!16343>ou Don't w<!16343>ant t<!16343>o M<!16343>lSS
th<!16343>is...</font></a></p></div>
<p align="center"><font size="1">Se<!16343>nd bl<!16343>ank let<!16343>ter
to opt<!16343>out at alt<!16343>ern.org for re<!16343>move</font></p>
</BODY>
</HTML>


Thank You
Will McCorkle
DG Systems
972-581-2119




More information about the MIMEDefang mailing list