[Postfixbuch-users] RBL Blocks meines Servers

Di Jun 8 12:10:28 CEST 2010

hallo Liste,

ich habe mal recherchiert und was gefunden, was mich bissel verwird ...
das habe ich bekommen, da mein Server auf eine rbl eingetragen wurde ...

witzig nur, dass die laut logs nie über meinen Server lief, wie auch, da
der sich mit seinem Namen meldet und nicht mit kundendomains ...

weiß einer von euch nen rat ??

lg
___________________________________

This is an automated email abuse report from the folks at
junkemailfilter.com for an email message received from IP address
[85.88.6.105] on Mon, 07 Jun 2010 13:23:03 -0700. 

The nature of this spam indicates possible fraud. Pay close attention to
both the from address ]<tonus-pharmacy28336 at yahoo.com>] and the reply-to
address [].

We hope this information will help you in determining the source of the
problem and shut it down. The original message is attached in MIME format
with complete headers. For more information about this standardized abuse
report format [ARF] please visit http://www.mipassoc.org/arf/
<http://www.mipassoc.org/arf/>  If you would prefer abuse reports in text
format let us know.

If you have any questions or feedback about this abuse report or are
interested in learning about our spam filtering technology feel free to
contact us. If this is not spam please accept our apologies and let us know
so we can fix the problem. Pay close attention to the REASON listed.

Marc Perkel - Fearless Leader

Junk Email Filter dot com

http://www.junkemailfilter.com <http://www.junkemailfilter.com/> 

errors at junkemailfilter.com

* Date: Mon, 07 Jun 2010 13:23:03 -0700

* From: <tonus-pharmacy28336 at yahoo.com>

* Subject: = L O V E + S E X + L O V E ! =

* Host: srv1.online-webservice24.de [85.88.6.105]

* Reason: SpamAssassin rejected - Score=30 X=pascal
H=srv1.online-webservice24.de [85.88.6.105] HELO=[www.ringowilhelm.de]
F=[tonus-pharmacy28336 at yahoo.com] T=[erik at sherpabusiness.com] S=[= L O V E +
S E X + L O V E ! =] - X=pascal H=srv1.online-webservi

For more information about these abuse reports:
http://wiki.junkemailfilter.com/index.php/Spam_abuse
<http://wiki.junkemailfilter.com/index.php/Spam_abuse> 

To test or be removed from our blacklist:
http://ipadmin.junkemailfilter.com/remove.php?ip=85.88.6.105
<http://ipadmin.junkemailfilter.com/remove.php?ip=85.88.6.105> 

======== Original Headers ========

Delivery-date: Mon, 07 Jun 2010 13:23:03 -0700

Received: from srv1.online-webservice24.de ([85.88.6.105]
helo=www.ringowilhelm.de)

by pascal.junkemailfilter.com with smtp (Exim 4.71)

id 1OLiqU-0003RH-Gt on interface=65.49.42.61

for erik at sherpabusiness.com; Mon, 07 Jun 2010 13:23:03 -0700

Received: (qmail 99405 invoked by uid 33); 07 Jun 2010 20:22:48 +0000

Date: 07 Jun 2010 20:22:48 +0000

Message-ID: <20100607202248.99405.qmail at www.ringowilhelm.de>

Subject: = L O V E + S E X + L O V E ! =

Reply-To: tonus-pharmacy28336 at yahoo.com

MIME-Version: 1.0

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: 8bit

From: <tonus-pharmacy28336 at yahoo.com>

To: erik at sherpabusiness.com

X-Priority: 3

X-Sender-Domain: online-webservice24.de

X-Freemail-From: yahoo.com

X-Freemail-Reply-to: yahoo.com

X-Spamfilter-host: pascal.junkemailfilter.com -
http://www.junkemailfilter.com <http://www.junkemailfilter.com/> 

X-Mail-from: tonus-pharmacy28336 at yahoo.com

X-Relay-Countries: de

X-Spam-Report: SpamAssassin 3.3.1 (2010-03-16) on spamd0.ctyme.com Spam
Tests:

* 4.0 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist

* [URIs: qveb.net]

* 0.1 FREEMAIL_FROM Sender email is freemail

* (tonus-pharmacy28336[at]yahoo.com)

* 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is

* CUSTOM_MED

* 1.0 FREEMAIL_FROM_END_DIGIT Freemail username ends in digit

* (tonus-pharmacy28336[at]yahoo.com)

* 1.6 SUBJ_ALL_CAPS Subject is all capitals

* 1.0 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

* (tonus-pharmacy28336[at]yahoo.com

)

* 2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

* digit (tonus-pharmacy28336[at]yahoo.com)

* 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers

* 0.0 HTML_MESSAGE BODY: HTML included in message

* 10 NIXSPAM_IXHASH BODY: iXhash found @ ix.dnsbl.manitu.net

* 1.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

* 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

* above 50%

* [cf: 100]

* 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

* [cf: 100]

* 0.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level

* above 50%

* [cf: 100]

* 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/
<http://razor.sf.net/> )

* 1.3 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t

* 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

* 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list

* 0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL

X-Spam-Class: SPAM-HIGH-VERY - SpamAssassin rejected - Score=30 X=pascal
H=srv1.online-webservice24.de [85.88.6.105] HELO=[www.ringowilhelm.de]
F=[tonus-pharmacy28336 at yahoo.com] T=[erik at sherpabusiness.com] S=[= L O V E +
S E X + L O V E ! =] - X=pascal H=srv1.online-webservice24.de [85.88.6.105]
HELO=[www.ringowilhelm.de] F=[tonus-pharmacy28336 at yahoo.com]
T=[erik at sherpabusiness.com] S=[= L O V E + S E X + L O V E ! =]

X-Spamsave: Yes - SpamAssassin rejected - Score=30 X=pascal
H=srv1.online-webservice24.de [85.88.6.105] HELO=[www.ringowilhelm.de]
F=[tonus-pharmacy28336 at yahoo.com] T=[erik at sherpabusiness.com] S=[= L O V E +
S E X + L O V E ! =] - X=pascal H=srv1.online-webservice24.de [85.88.6.105]
HELO=[www.ringowilhelm.de] F=[tonus-pharmacy28336 at yahoo.com]
T=[erik at sherpabusiness.com] S=[= L O V E + S E X + L O V E ! =]

X-Sender-Host-Address: 85.88.6.105

X-Sender-Host-Name: srv1.online-webservice24.de

X-Original-helo: www.ringowilhelm.de <outbind://29/www.ringowilhelm.de> 