1.eml hits a 12.7 on my system:

---- ----------------------
--------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
]
3.1 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[201.233.220.168 listed in
sbl-xbl.spamhaus.org]
2.6 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS
records
0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[201.233.220.168 listed in zen.spamhaus.org]
5.0 BOTNET Relay might be a spambot or virusbot

[botnet0.7,ip=201.233.220.168,maildomain=crochan.co m,nordns]
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 RDNS_NONE Delivered to trusted network by a host with
no rDNS

2.eml hits a 9.9

Content analysis details: (9.9 points, 5.0 required)

pts rule name description
---- ----------------------
--------------------------------------------------
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
[201.229.148.211 listed in dnsbl.sorbs.net]
0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[201.229.148.211 listed in zen.spamhaus.org]
0.7 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
5.0 BOTNET Relay might be a spambot or virusbot
[botnet0.7,ip=201.229.148.211,hostname=tdev148-211.codetel.net.do,maildomain=smogexpressbelmont.c om,baddns,client,ipinhostname]

0.0 HTML_MESSAGE BODY: HTML included in message
1.6 HTML_FONT_SIZE_LARGE BODY: HTML font size is large
0.1 RDNS_NONE Delivered to trusted network by a host with
no rDNS




Spamassassin List wrote:
> Hi,
>
> My inbox is flooded by some new spams. Any idea how do I block it?
>
> http://202.42.86.77/1.eml
> http://202.42.86.77/2.eml
>
> Best regards
>
>
>
>