Superspam filter resistant

[guyeva]

Just now I got spam from Facebook Rewards that no matter how I tried to add it to my filters they would not deal with it at all. I have no idea how this did this, but they seem to have come up with superspam that you cannot filter out no matter what you do. Not a good thing at all.

Here's the header:

X-Apparently-To: xxxxxxxx@sbcglobal.net via 216.252.120.179; Mon, 04 Jul 2011 09:02:41 -0700
Received-SPF: softfail (transitioning domain of bafive.com does not designate 31.131.43.7 as permitted sender)
X-YMailISG: cEBt58sWLDuuX.jve8HenyV9UZRRU3qQrdHfBTuoPEVyly7q
8xwTtg7YGc3EbqvggMqjK7mZMiG5qOPLmeVEAeSRzC7OhFEhiAyKhinWuujs
nond.zckABXmFl_ifhqw5pmWz_3JLCUj7kLBQgd48CuQbs7Hv3MF2QuQq9ep
SRrGopsHHzaj484ILGklG3hFumDIY9VaNx_lGl03AUWB.V6AQoOPyp3d2kzT
UMfwUE3mRrAqwKdLxH7dw_YDNrKRsIri1jtWG1RVYai1D3F5EryEZern5r5v
D5kPGKRXjtynkkXl9yrvoxyo8jX0ht4MdZKu6V.c._QIizHdrwNxHo8ImPfv
Ebo2_9yRCz935SE73beMqyY_TMbywuiCeXfhIkkd3Q.sgi6v4HL.7niuhYWD
VI_X3I1NDZnhiS3ymuBIi9bP5ALRjxuvfKtJK.L4zg.cFi1zJs.0VWBZ98FN
CPFmSlP8RKl43ldf_fBoiV2I047q42za3Mo5qPrhBj4mGGOQ32ER4DiEiA--
X-Originating-IP: [31.131.43.7]
Authentication-Results: mta1035.sbc.mail.sp1.yahoo.com from=bafive.com; domainkeys=neutral (no sig); from=bafive.com; dkim=neutral (no sig)
Received: from 31.131.43.7 (EHLO flpd242.prodigy.net) (207.115.20.159)
by mta1035.sbc.mail.sp1.yahoo.com with SMTP; Mon, 04 Jul 2011 09:02:40 -0700
X-Originating-IP: [31.131.43.7]
Received: from arlkdssgfdfslkfjsaldolgvi.com (zone-rdns54.com31-131-43-7.zone-rdns54.com [31.131.43.7])
by flpd242.prodigy.net (8.14.4 IN/8.14.4) with ESMTP id p64G2baF020569
for <xxxxxxxx@sbcglobal.net>; Mon, 4 Jul 2011 09:02:40 -0700
From: "Facebook Rewards" <FacebookNew_kakh@bafive.com>
To: XXX.XXXXX@sbcglobal.net
Subject: Earn.a.Free.$250.Gift.Card,iPad.or.iPhone
Date: Mon, 4 Jul 2011 20:05:46 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--------MB_8CC3B4D15BDDE56_6627971514_23_webmail-279715279715sy279715sops.bafive.com"
Message-Id: <279715_8CC3B4D15BB7CF6-6614-1156@webmail.hjlds.ilmx-d069.sysops.bafive.com>

----------MB_8CC3B4D15BDDE56_6627971514_23_webmail-279715279715sy279715sops.bafive.com
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="us-ascii"

----------MB_8CC3B4D15BDDE56_6627971514_23_webmail-279715279715sy279715sops.bafive.com
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset="us-ascii"


No matter what rule I use for sender, subject, message content, etc it will not filter this horrid stuff out to my trash bin.

Anyone else run into this?

 

[Doctor X]

It is not from "Facebook Rewards" the IP is 31.131.43.7 which means you need to forward a complaint to office@mdcmedianet.com. The address FacebookNew_kakh@bafive.com is probably a spoof though you can try reporting it to office@romeuro.ro . . . fat lot that may or may not do!

You also need to REDACT your e-mail address from above as WELL as from your http://www.techsupportforum.com/ thread unless you want a whole SLEW of spam inviting you to give away your credit card information for viagra, get really vile vegetable-on-mineral porn, and help Usman clear the unclaimed inheritance of Saddam Hussein and L. Ron Hubbard's love child--"100% Risky Free!"

Do not know what e-mail client you are using, so do not know what filters you can use.

You can also join http://www.spamcop.net/ and join the reporting of spam! You will become popular! Children will smile when they hear your name . . . unlike now where they cry uncontrollably then vomit.

--J.D.