View Single Post

   
  #6 (permalink)  
Old 02-21-2008, 12:02 PM
Jan Schubert
 
Posts: n/a
Default Re: spamassassin question

Albert wrote:
> Anybody has an idea ?


Have you checked the Header fields in the message? You mail client
should be capable to filter these. Below is an example from my spam box
today.

HTH,
Jan

X-Spam-Status: Yes, score=15.708 tagged_above=2 required=5
tests=[BAYES_80=2,
DATE_IN_FUTURE_96_XX=2.403, HELO_DYNAMIC_IPADDR2=3.818,
HTML_IMAGE_ONLY_32=1.052, HTML_MESSAGE=0.001,
RCVD_IN_BL_SPAMCOP_NET=1.558,
RCVD_IN_NJABL_DUL=1.946, RCVD_IN_SORBS_DUL=2.046, URI_NOVOWEL=0.884]
X-Spam-Score: 15.708
X-Spam-Level: ***************
X-Spam-Flag: YES
X-Spam-Report: Spam detection software, running on the system
"enterprise.ds.de", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hi, postmaster. I railing of clanking a hasty the
thronged is whiffled She waists was decentlooking of syringe it
recompensed beaches Me unkempt fires is finelooking of insolendy a
talkativeness A reason? the reception raven it bewildered she vermin You
contemplate of geese the instruments and typist or drunk Not sparkles
you currency and enterers me exterior exposures No thanks is gush this
vanished of edges the foreigners If theatres we quieter of disciplined a
highranking is lodger An fetch me lawn you anxious she righty longed
Have people crows of wettest it intact was party Was apron not register
nauseous a wrung or privy And marriage population is danger of subject
an casting [...] Content analysis details: (15.7 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
3.8 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr
2)
2.4 DATE_IN_FUTURE_96_XX Date: is 96 hours or more after Received: date
0.9 URI_NOVOWEL URI: URI hostname has long non-vowel sequence
1.1 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of
words
2.0 BAYES_80 BODY: Bayesian spam probability is 80 to 95%
[score: 0.9347]
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
[218.186.234.175 listed in dnsbl.sorbs.net]
1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
<http://www.spamcop.net/bl.shtml?218.186.234.175>]
1.9 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[218.186.234.175 listed in combined.njabl.org]






--
Lasst uns mehr Freiheit wagen! /"\ ASCII ribbon campaign
- Angela Merkel, 30.11.2005 \ / against HTML
X in eMail and news
/ \
Reply With Quote