Re: Spam PDF

> Hi!
>
>> We just caught one:
>>
>> Content analysis details:   (5.0 points, 4.0 required)
>>
>> pts rule name              description
>> - ---- ----------------------
>> - --------------------------------------------------
>> 0.6 SPF_SOFTFAIL           SPF: sender does not match SPF record
>> (softfail)
>> 0.4 BAYES_60               BODY: Bayesian spam probability is 60 to 80%
>>                            [score: 0.7404]
>> 2.2 TVD_SPACE_RATIO        BODY: TVD_SPACE_RATIO
>> 0.9 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
>> address
>>                            [201.32.227.251 listed in dnsbl.sorbs.net]
>> 0.9 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
>>                            [201.32.227.251 listed in zen.spamhaus.org]
>
> Jun 27 14:50:03 vmx80 MailScanner[4491]: Message l5RCnxP8019756 from
> 212.127.254.149 (idqct@...) to quicknet.nl is spam,
> SpamAssassin (not cached, score=24.191, required 5, BAYES_50 0.00,
> BODY_EMPTY 0.50, GMD_PDF_BAD_FUZZY 20.00, GMD_PDF_HORIZ 0.25,
> GMD_PDF_STOX 1.00, PROLO_NO_URI 0.01, RCVD_IN_WHOIS_BOGONS 2.43)
>
> Dallas rocks!
>