Spam Filtering Headers

Submitted by maz on Tue, 04/06/2010 - 22:45

It seems that most of the headers in emails are now for spam filtering:

Return-Path: <services@llodystsb.com>
Delivered-To: XXX
Received: from mir.creativeconcern.com ([::ffff:193.142.245.9])
  by mx10.faelix.net with esmtp; Tue, 06 Apr 2010 23:38:57 +0100
  id 0000C006.4BBBB801.000044DE
Received-SPF: pass (Address passes the Sender Policy Framework)
  SPF=HELO;
  sender=mir.creativeconcern.com;
  remoteip=::ffff:193.142.245.9;
  remotehost=;
  helo=mir.creativeconcern.com;
  receiver=faelix.net;
Received-SPF: none (Address does not pass the Sender Policy Framework)
  SPF=MAILFROM;
  sender=services@llodystsb.com;
  remoteip=::ffff:193.142.245.9;
  remotehost=;
  helo=mir.creativeconcern.com;
  receiver=faelix.net;
Received: by mir.creativeconcern.com (Postfix, from userid 998)
id 4094DA011; Tue,  6 Apr 2010 23:38:57 +0100 (BST)
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
mir.creativeconcern.com
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.4 required=5.0 tests=FORGED_MUA_OUTLOOK,
FORGED_OUTLOOK_HTML,HTML_MESSAGE,MIME_HTML_ONLY,MSOE_MID_WRONG_CASE,RDNS_NONE,
URIBL_BLACK,XMAILER_MIMEOLE_OL_1ECD5 autolearn=no version=3.2.5
X-Spam-Report:
*  0.0 HTML_MESSAGE BODY: HTML included in message
*  1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
*  2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
*      [URIs: foxtronics.com.br]
*  2.8 XMAILER_MIMEOLE_OL_1ECD5 XMAILER_MIMEOLE_OL_1ECD5
*  0.7 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
*  0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
*  0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
*  4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
X-Greylist: from auto-whitelisted by SQLgrey-1.6.8
Received: from craigproctorsystem.com (unknown [216.55.183.205])
by mir.creativeconcern.com (Postfix) with ESMTPS id 5F9AFA010
for <XXX>; Tue,  6 Apr 2010 23:38:55 +0100 (BST)
Received: (qmail 3566 invoked from network); 6 Apr 2010 12:08:12 -0000
Received: from dsl-8-28.wholesaledsl.com.au (HELO User) (125.168.8.28)
  by craigproctorsystem.com with SMTP; 6 Apr 2010 12:08:12 -0000
From: "Lloyds TSB Bank plc" <services@llodystsb.com>
Subject: ***** SPAM 11.4 ***** Customer Service: *** Important Security Issue ***
Date: Tue, 6 Apr 2010 21:54:29 +1000
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
Message-Id: <20100406223855.5F9AFA010XXXmir.creativeconcern.com>
To: undisclosed-recipients: ;
X-Spam-Prev-Subject: Customer Service: *** Important Security Issue ***
Received-SPF: none (Address does not pass the Sender Policy Framework)
  SPF=FROM;
  sender=services@llodystsb.com;
  remoteip=::ffff:193.142.245.9;
  remotehost=;
  helo=mir.creativeconcern.com;
  receiver=faelix.net;
X-CRM114-Version: 20080326-BlameSentansoken ( TRE 0.7.5 (LGPL) ) MF-451D0E20 [pR: -3.8148]
X-CRM114-CacheID: sfid-20100406_233857_690979_E6F6A2B6
X-CRM114-Status: UNSURE (-3.8148) This message is 'unsure'; please train it!

Tag:

Category: