[ewg] Mail delivery failed: returning message to sender

Sat Aug 16 09:59:38 PDT 2008

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  save to /home/wrnradmin/.spamassassin/user_spam/bobw at wrnr.com
    generated by bobw at wrnr.com
    retry timeout exceeded

------ This is a copy of the message, including all the headers. ------

Return-path: <ewg at openib.org>
Received: from mail by sh1.sidushost.com with spam-scanned (Exim 4.67)
	(envelope-from <ewg at openib.org>)
	id 1KUP7p-0003GX-Kl
	for bobw at wrnr.com; Sat, 16 Aug 2008 12:59:37 -0400
Received: from localhost by sh1.sidushost.com
	with SpamAssassin (version 3.2.4);
	Sat, 16 Aug 2008 12:59:37 -0400
From: "jefry atlanta" <ewg at openib.org>
To: <bobw at wrnr.com>
Subject: *****SPAM***** Big Dicks Movies
Date: Sat, 16 Aug 2008 15:37:06 +0000
Message-Id: <000601c8ffc4$04f7dbd4$9b4c1ab0 at nxnub>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on sh1.sidushost.com
X-Spam-Level: ************
X-Spam-Status: Yes, score=12.3 required=5.0 tests=BAYES_95,FH_HELO_EQ_D_D_D_D,
	HELO_DYNAMIC_IPADDR,HTML_MESSAGE,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_PBL,
	RCVD_IN_SORBS_DUL,RCVD_IN_XBL,RDNS_DYNAMIC autolearn=no version=3.2.4
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_48A70779.DAACD0C8"

This is a multi-part message in MIME format.

------------=_48A70779.DAACD0C8
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "sh1.sidushost.com", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  .WEQnoLd Blowjobs gerls!!>>>/A> Blowjobs gerls!!>>>/A> [...]

Content analysis details:   (12.3 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 FH_HELO_EQ_D_D_D_D     Helo is d-d-d-d
 2.4 HELO_DYNAMIC_IPADDR    Relay HELO'd using suspicious hostname (IP addr
                            1)
 0.0 HTML_MESSAGE           BODY: HTML included in message
 3.0 BAYES_95               BODY: Bayesian spam probability is 95 to 99%
                            [score: 0.9762]
 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see <http://www.spamcop.net/bl.shtml?66.222.147.216>]
 0.9 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [66.222.147.216 listed in dnsbl.sorbs.net]
 3.0 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [66.222.147.216 listed in zen.spamhaus.org]
 0.9 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
 0.1 RDNS_DYNAMIC           Delivered to trusted network by host with
                            dynamic-looking rDNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

------------=_48A70779.DAACD0C8
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from d66-222-147-216.abhsia.telus.net ([66.222.147.216])
	by sh1.sidushost.com with esmtp (Exim 4.67)
	(envelope-from <ewg at openib.org>)
	id 1KUP7p-0003GU-AK
	for bobw at wrnr.com; Sat, 16 Aug 2008 12:59:37 -0400
Message-ID: <000601c8ffc4$04f7dbd4$9b4c1ab0 at nxnub>
From: "jefry atlanta" <ewg at openib.org>
To: <bobw at wrnr.com>
Subject: Big Dicks Movies
Date: Sat, 16 Aug 2008 15:37:06 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0003_01C8FFC4.04F53B67"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300

This is a multi-part message in MIME format.

------=_NextPart_000_0003_01C8FFC4.04F53B67
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

.WEQnoLd
Blowjobs gerls!!>>>/A>=09

------=_NextPart_000_0003_01C8FFC4.04F53B67
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2720.3000" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<style>
.WEQnoLd
</style>
<DIV style=3D"width:100%; padding:10px; " class=3D"ZMcSqgZ">
<H3 id=3D"WEQnoLd"><A href=3D"http://xgz-webspace.at/index1.php" =
style=3D"color:#C20726; font-size:14px;">Blowjobs gerls!!>>>/A></H3>=09
</DIV></BODY></HTML>
------=_NextPart_000_0003_01C8FFC4.04F53B67--

------------=_48A70779.DAACD0C8--