I general our spam well controled...

I got rid of almost all email comming with different from/return path and
the fake email coming from our domain

thanks to the great help from the poeple on this forum...


but lately I have seen and increase in spam and I am just wondering if you guys know how to get rid of them...

a lot of spam email lately comes with
they all have a .rtf attachement to them???

here is to example...

Return-Path: genericness@idcol.org
Received: from mail.redballinternet.com (LHLO mail.redballinternet.com)
(142.166.48.148) by mail.redballinternet.com with LMTP; Mon, 14 Jun 2010
18:52:30 -0300 (ADT)
Received: from localhost (localhost [127.0.0.1])
by mail.redballinternet.com (Postfix) with ESMTP id D22252DC005;
Mon, 14 Jun 2010 18:52:30 -0300 (ADT)
X-Virus-Scanned: amavisd-new at mail.redballinternet.com
X-Spam-Flag: NO
X-Spam-Score: 5.038
X-Spam-Level: *****
X-Spam-Status: No, score=5.038 tagged_above=-10 required=6.6
tests=[BAYES_60=1, RCVD_IN_PBL=0.905, RCVD_IN_XBL=3.033,
RDNS_DYNAMIC=0.1] autolearn=no
Received: from mail.redballinternet.com ([127.0.0.1])
by localhost (mail.redballinternet.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 4j0accI0bgzk; Mon, 14 Jun 2010 18:52:29 -0300 (ADT)
Received: from awaydy.kabel-badenwuerttemberg.de (HSI-KBW-078-043-178-048.hsi4.kabel-badenwuerttemberg.de [78.43.178.48])
by mail.redballinternet.com (Postfix) with SMTP id 901B32DC004
for <xxxxxx@redballinternet.com>; Mon, 14 Jun 2010 18:52:29 -0300 (ADT)
Message-ID: <4C16A3B4.7020802@idcol.org>
Date: Mon, 14 Jun 2010 23:54:53 +0200
From: Linebaugh Digiouanni <genericness@idcol.org>
MIME-Version: 1.0
To: Pais Donah <customerprivacy@redballinternet.com>
Subject: Same seat in a buggy: if the white ma
Content-Type: application/octet-stream; name="moralisingly.rtf"
Content-Transfer-Encoding: base64


Return-Path: flowered@kantipur.com.np
Received: from mail.redballinternet.com (LHLO mail.redballinternet.com)
(142.166.48.148) by mail.redballinternet.com with LMTP; Mon, 14 Jun 2010
13:54:42 -0300 (ADT)
Received: from localhost (localhost [127.0.0.1])
by mail.redballinternet.com (Postfix) with ESMTP id 007332DC005
for <xxxxxx@redballinternet.com>; Mon, 14 Jun 2010 13:54:42 -0300 (ADT)
X-Virus-Scanned: amavisd-new at mail.redballinternet.com
X-Spam-Flag: NO
X-Spam-Score: 3.568
X-Spam-Level: ***
X-Spam-Status: No, score=3.568 tagged_above=-10 required=6.6
tests=[BAYES_60=1, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877,
RDNS_DYNAMIC=0.1, SPF_NEUTRAL=0.686] autolearn=no
Received: from mail.redballinternet.com ([127.0.0.1])
by localhost (mail.redballinternet.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id DDszhuh3dSvg for <xxxxxx@redballinternet.com>;
Mon, 14 Jun 2010 13:54:40 -0300 (ADT)
Received: from mpuk.telepac.pt (bl5-34-23.dsl.telepac.pt [82.154.34.23])
by mail.redballinternet.com (Postfix) with SMTP id 0BDFB2DC004
for <xxxxxx@redballinternet.com>; Mon, 14 Jun 2010 13:54:39 -0300 (ADT)
Message-ID: <4C165E0F.1060302@kantipur.com.np>
Date: Mon, 14 Jun 2010 17:56:59 +0100
From: Lynetta Szostak <flowered@kantipur.com.np>
MIME-Version: 1.0
To: Adriene Valine <xxxxxx@redballinternet.com>
Subject: He was poisoned by his wife Ethelburga daughter vnto Offa king of M
Content-Type: application/octet-stream; name="homemaker.rtf"
Content-Transfer-Encoding: base64




i also have have what i call real spam...
email with the same from/return path that just dont get pick up as spam




Return-Path: myqehuci5634@superkabel.de
Received: from mail.redballinternet.com (LHLO mail.redballinternet.com)
(142.166.48.148) by mail.redballinternet.com with LMTP; Tue, 15 Jun 2010
08:45:52 -0300 (ADT)
Received: from localhost (localhost [127.0.0.1])
by mail.redballinternet.com (Postfix) with ESMTP id 5CECE2DC005
for <xxxxxx@redballinternet.com>; Tue, 15 Jun 2010 08:45:52 -0300 (ADT)
X-Virus-Scanned: amavisd-new at mail.redballinternet.com
X-Spam-Flag: NO
X-Spam-Score: 5.964
X-Spam-Level: *****
X-Spam-Status: No, score=5.964 tagged_above=-10 required=6.6
tests=[BAYES_99=3.5, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457,
MISSING_MID=0.001, RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1] autolearn=no
Received: from mail.redballinternet.com ([127.0.0.1])
by localhost (mail.redballinternet.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id LtCy1MDPSe9S for <xxxxxx@redballinternet.com>;
Tue, 15 Jun 2010 08:45:51 -0300 (ADT)
Received: from superkabel.de (95-91-154-28-dynip.superkabel.de [95.91.154.28])
by mail.redballinternet.com (Postfix) with ESMTP id 4AA9C2DC004
for <xxxxxxx@redballinternet.com>; Tue, 15 Jun 2010 08:45:51 -0300 (ADT)
From: TopViagra WebPharmacy <myqehuci5634@superkabel.de>
To: careers@redballinternet.com
Subject: To careers. 80% off Wholesale. by FL In German
Date: Tue, 15 Jun 2010 13:48:10 +0200
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
Message-Id: <20100615114552.5CECE2DC005@mail.redballinternet.c om>




Return-Path: accessw8@rayholtz.com
Received: from mail.redballinternet.com (LHLO mail.redballinternet.com)
(142.166.48.148) by mail.redballinternet.com with LMTP; Mon, 14 Jun 2010
04:36:22 -0300 (ADT)
Received: from localhost (localhost [127.0.0.1])
by mail.redballinternet.com (Postfix) with ESMTP id 1CEB32DC005
for <xxxxxxx@redballinternet.com>; Mon, 14 Jun 2010 04:36:22 -0300 (ADT)
X-Virus-Scanned: amavisd-new at mail.redballinternet.com
X-Spam-Flag: NO
X-Spam-Score: 5.857
X-Spam-Level: *****
X-Spam-Status: No, score=5.857 tagged_above=-10 required=6.6
tests=[BAYES_99=3.5, HTML_MESSAGE=0.001, RCVD_IN_PBL=0.905,
RDNS_NONE=0.1, TVD_RCVD_SINGLE=1.351] autolearn=no
Received: from mail.redballinternet.com ([127.0.0.1])
by localhost (mail.redballinternet.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id pm15aQP+QVT4 for <xxxxxx@redballinternet.com>;
Mon, 14 Jun 2010 04:36:21 -0300 (ADT)
Received: from SJKWJSIVPW (unknown [94.51.176.157])
by mail.redballinternet.com (Postfix) with ESMTP id 547302DC004
for <xxxxxx@redballinternet.com>; Mon, 14 Jun 2010 04:36:21 -0300 (ADT)
Received: from 94.51.176.157 by mailstore1.secureserver.net; Mon, 14 Jun 2010 11:38:33 +0300
Date: Mon, 14 Jun 2010 11:38:33 +0300
From: "Russel Mcdowell" <accessw8@rayholtz.com>
X-Mailer: The Bat! (v3.71.01) Educational
Reply-To: accessw8@rayholtz.com
X-Priority: 3 (Normal)
Message-ID: <697484003.79122794904937@rayholtz.com>
To: xxxxxx@redballinternet.com
Subject: 2 Girls Show Tits and Pussy in a Home Movie
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------410FF7D1F130AA"

------------410FF7D1F130AA
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

Dam that girl works a strapon

Open attached file to watch video

------------410FF7D1F130AA
Content-Type: text/html; name="open.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="open.html"