[Mimedefang] New X-AntiAbuse way for spammer

[Pierre Forget]

Hi,

I noticed that spammers are using a new way (well, new to me...) to  
get their message through. They use the X-AntiAbuse in the headers. I  
declared the spam to Spamassassin in my SpamTrap, but it had already  
got them. But they still go through. Any idea how to get rid of this?  
Here is an example header:

Return-Path: <rmaryland at newadvent.org>
Received: from oemc8b286a37b8 ([190.128.82.83])
         by mail.hebergement-quebec.net (8.13.7/8.12.11) with SMTP id  
m4HJCdkn014921;
         Sat, 17 May 2008 15:12:40 -0400
Received: (from tomcat at localhost)
         by 124.110.142.118 (8.12.8/8.12.8/Submit) id j7CHmn3V887443
         for heritage at ste-agathe.com; Sat, 17 May 2008 14:11:52 +0500
Date: Sat, 17 May 2008 14:11:52 +0500
Message-ID: <552l107z.6703637 at newadvent.org>
X-Mailer: Mediacomm Communicator 1.61
X-AntiAbuse: This header was added to track abuse, please include it  
with any abuse report
X-AntiAbuse: Primary Hostname - whoosh.credit.net
X-AntiAbuse: Original Domain - resortsandlodges.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [93 72]
X-AntiAbuse: Sender Address Domain - luxuryresorts.com
X-Source:
X-Source-Args:
X-Source-Dir:
X-Auth: 3-DES
X-Auth-bits: 80817065628309686738001083
Content-Type: text/plain;
         charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: <heritage at ste-agathe.com>
Cc: <info at ste-agathe.com>, <pierre.forget at ste-agathe.com>
From: "Jermaine Adkins" <rmaryland at newadvent.org>
Subject: download video slots
X-Scanned-By: MIMEDefang 2.62 on 127.0.0.1
X-UIDL: C$##!$i""!j/j!!^JE!!
Status: O
X-Status:
X-Keywords:
X-UID: 40

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.