FW: Striphtml VS attachment and related issues
Quentin Campbell
Q.G.Campbell at NEWCASTLE.AC.UK
Fri Aug 1 14:36:18 IST 2003
Julian
QUESTION: If you have "deliver attachment" set for spam, what determines
when the message body of a tagged message is placed in an attachment and
when it is not?
BACKGROUND: Until I installed MS 4.22-5 we had been using "deliver
striphtml" as the action to take for messages tagged as spam.
Some users were unhappy with this when they received false positives
because they lost most of the original (HTML) message. However
recipients of real spam messages are universally happy with "deliver
striphtml".
To address the problems with some false positive messages I am trying
"deliver attachment" as an alternative, initially for a small group of
our 20,000+ users. This works fine for the few false positives they
receive which also happen to be HTML. However it is not very nice nor
necessary when the false positive contains no HTML. In this case the
message should be delivered as-is and not in an attachment.
I notice that some of my tagged messages are not put in an attachment
before delivery. That is fine since they contain no HTML. This is my
preferred behaviour in that situation. However I have examples of spam
(see appended message) which although not appearing to contain any HTML
*are* put in an attachment before delivery. Why?
I cannot see what the essential difference is between the two sorts of
tagged messages!
Quentin
---
PHONE: +44 191 222 8209 Computing Service, University of Newcastle
FAX: +44 191 222 8765 Newcastle upon Tyne, United Kingdom, NE1 7RU.
------------------------------------------------------------------------
"Any opinion expressed above is mine. The University can get its own."
-----Original Message-----
From: Denis Russell [mailto:Denis.Russell at ncl.ac.uk]
Sent: 01 August 2003 10:43
To: Quentin Campbell
>Subject: Fwd: SP? BUSINESS PROPOSAL
Quentin,
I'm still getting spam messages put into an attachment, even
though I can see no hint of HTML in the message.
Denis.
>Received: from cheviot2.ncl.ac.uk (cheviot2.ncl.ac.uk [128.240.229.35])
> by burnmoor.ncl.ac.uk (8.9.3/8.9.3) with ESMTP id KAA23866
> for <ndmr at burnmoor.ncl.ac.uk>; Fri, 1 Aug 2003 10:19:25 +0100
(BST)
>From: mbanakaka at send-mail.co.uk
>Received: from netmail01.eng.net (netmail01.eng.net [213.130.128.38])
> by cheviot2.ncl.ac.uk (8.10.1/8.10.1) with ESMTP id
h719J9B27765;
> Fri, 1 Aug 2003 10:19:09 +0100
>Received: from send-mail.co.uk (netmail01.eng.net [127.0.0.1])
> by netmail01.eng.net (8.11.3/8.11.3) with SMTP id h719DEx03690;
> Fri, 1 Aug 2003 10:13:14 +0100
>Received: from 192.116.107.67
> (SquirrelMail authenticated user mbanakakasendmail)
> by mail.send-mail.co.uk with HTTP;
> Fri, 1 Aug 2003 10:14:08 +0100 (BST)
>Message-ID:
><1308.192.116.107.67.1059729248.squirrel at mail.send-mail.co.uk>
>Date: Fri, 1 Aug 2003 10:14:08 +0100 (BST)
>Subject: SP? BUSINESS PROPOSAL
>To: <mbanakaka at send-mail.co.uk>
>X-Mailer: SquirrelMail (version 1.1.1)
>MIME-Version: 1.0
>Content-type: multipart/digest; boundary="======24934==61103======"
>X-Newcastle-MailScanner-Information: Please contact
>Postmaster at newcastle.ac.uk for more information
>X-Newcastle-MailScanner: Found to be clean
>X-Newcastle-MailScanner-SpamCheck: spam, SpamAssassin (score=15.5,
> required 5, BAYES_90 3.00, FROM_AND_TO_SAME 1.70, NIGERIAN_BODY
2.69,
> NO_REAL_NAME 1.15, SUBJ_ALL_CAPS 0.49, UPPERCASE_75_100 0.00,
> US_DOLLARS 1.14, US_DOLLARS_3 0.92, US_DOLLAR_6 4.50)
>X-Newcastle-MailScanner-SpamScore: sssssssssssssss
>X-UIDL: ed9a1cce8f31e51ff8261f1a6425c1a7
>
>--======24934==61103======
>Our MailScanner believes that the attachment to this message sent to
>you
>
> From: mbanakaka at send-mail.co.uk
> Subject: BUSINESS PROPOSAL
>
>is Unsolicited Commercial Email (spam). Unless you are sure that this
>message is incorrectly thought to be spam, please delete this message
>without opening it. Opening spam messages might allow the spammer to
>verify your email address and thus result in even more spam being
>received.
>
>If you believe that this message has been incorrectly marked as spam,
>please forward this email to Postmaster at newcastle.ac.uk.
>
>
>--======24934==61103======
>Return-Path: <g>
>Received: from netmail01.eng.net (netmail01.eng.net [213.130.128.38])
> by cheviot2.ncl.ac.uk (8.10.1/8.10.1) with ESMTP id
h719J9B27765;
> Fri, 1 Aug 2003 10:19:09 +0100
>Received: from send-mail.co.uk (netmail01.eng.net [127.0.0.1])
> by netmail01.eng.net (8.11.3/8.11.3) with SMTP id h719DEx03690;
> Fri, 1 Aug 2003 10:13:14 +0100
>From: mbanakaka at send-mail.co.uk
>Received: from 192.116.107.67
> (SquirrelMail authenticated user mbanakakasendmail)
> by mail.send-mail.co.uk with HTTP;
> Fri, 1 Aug 2003 10:14:08 +0100 (BST)
>Message-ID:
><1308.192.116.107.67.1059729248.squirrel at mail.send-mail.co.uk>
>Date: Fri, 1 Aug 2003 10:14:08 +0100 (BST)
>Subject: BUSINESS PROPOSAL
>To: <mbanakaka at send-mail.co.uk>
>X-Mailer: SquirrelMail (version 1.1.1)
>MIME-Version: 1.0
>Content-Type: text/plain
>Content-Transfer-Encoding: 8bit
>
>FROM: BARRISTER KAKA MBANA ESQ.
> KAKA MBANA & CO
> ATTORNEYS/LEGAL PRACTITIONER
> NIGERIA.
>
>
>REPLY TO:kakambana at tiscali.co.uk
>DEAR FRIEND,
>
>COMPLIMENTS OF THE SEASON. GRACE AND PEACE AND LOVE
>FROM THIS PART OF THE ATLANTIC TO YOU. I HOPE MY
>LETTER DOES NOT CAUSE YOU TOO MUCH EMBARRASSMENT AS I
>WRITE TO YOU IN GOOD FAITH BASED ON THE CONTACT
>ADDRESS GIVEN TO ME BY A FRIEND WHO WORKS AT THE
>NIGERIAN EMBASSY IN YOUR COUNTRY. PLEASE EXCUSE MY
>INTRUSION INTO YOUR PRIVATE LIFE.
>
>
>I AM BARRISTER KAKA MBANA ESQ. I REPRESENT MOHAMMED
>ABACHA, SON OF THE LATE GEN.SANI ABACHA, WHO WAS THE
>FORMER MILITARY HEAD OF STATE IN NIGERIA. HE DIED IN
>1998. SINCE HIS DEATH, THE FAMILY HAS BEEN LOSING A
>LOT OF MONEY DUE TO VINDICTIVE GOVERNMENT OFFICIALS
>WHO ARE BENT ON DEALING WITH THE FAMILY. BASED ON THIS THEREFORE, THE
>FAMILY HAS ASKED ME TO SEEK FOR A FOREIGN PARTNER WHO CAN WORK WITH US
>AS TO MOVE OUT THE TOTAL SUM OF US$75,000,000.00 ( SEVENTY FIVE
>MILLION UNITED STATES DOLLARS ), PRESENTLY IN THEIR
>POSSESSION. THIS MONEY WAS OF COURSE, ACQUIRED BY THE
>LATE PRESIDENT AND IS NOW KEPT SECRETLY BY THE FAMILY.
>THE SWISS GOVERNMENT HAS ALREADY FROZEN ALL THE
>ACCOUNTS OF THE FAMILY IN SWITZERLAND, AND SOME OTHER
>COUNTRIES WOULD SOON FOLLOW TO DO THE SAME. THIS BID
>BY SOME GOVERNMENT OFFICIALS TO DEAL WITH THIS FAMILY
>HAS MADE IT NECESSARY THAT WE SEEK YOUR ASSISITANCE IN
>RECEIVING THIS MONEY AND IN INVESTING IT ON BEHALF
>OFTHE FAMILY.
>
>THIS MUST BE A JOINT VENTURE TRANSACTION AND WE MUST
>ALL WORK TOGETHER. SINCE THIS MONEY IS STILL CASH,
>EXTRA SECURITY MEASURES HAVE BEEN TAKEN TO PROTECT IT
>FROM THEFT OR SEIZURE, PENDING WHEN AGREEMENT IS
>REACHED ON WHEN AND HOW TO MOVE IT INTO ANY OF YOUR
>NOMINATED BANK ACCOUNTS. I HAVE PERSONALLY WORKED OUT
>ALL MODALITIES FOR THE PEACEFUL CONCLUSION OF THIS TRANSACTION. THE
>TRANSACTION DEFINITELY WOULD BE HANDLED IN PHASES AND THE FIRST PHASE
>WILL INVOLVE THE MOVING OF US$25,000,000.00( TWENTY FIVE MILLION
>UNITEDSTATES DOLLARS ).
>
>
>MY CLIENTS ARE WILLING TO GIVE YOU A REASONABLE
>PERCENTAGE OF THIS MONEY AS SOON AS THE TRANSACTIONIS CONCLUDED. I
>WILL, HOWEVER, BASED ON THE GROUNDS THAT YOU ARE WILLING TO WORK WITH
>US AND ALSO ALL CONTENTIOUS ISSUES DISCUSSED BEFORE THE COMMENCEMENT
>OF THIS TRANSACTION. YOU MAY ALSO DISCUSS YOUR
>PERCENTAGE BEFORE WE START TO WORK. AS SOON AS I HEAR
>FROM YOU, I WILL GIVE YOU ALL NECESSARY DETAILS AS TO
>HOW WE INTEND TO CARRY OUT THE WHOLE TRANSACTION.
>PLEASE, DO NOT ENTERTAIN ANY FEARS,AS ALL NECESSARY
>MODALITIES ARE IN PLACE, AND I ASSURE YOU OF ALL
>SUCCESS AND SAFETY IN THIS TRANSACTION.
>
>PLEASE, THIS TRANSACTION REQUIRES ABSOLUTE
>CONFIDENTIALITY AND YOU WOULD BE EXPECTED TO TREAT IT
>AS SUCH UNTIL THE FUNDS ARE MOVED OUT OF THIS COUNTRY.
>
>PLEASE, YOU WILL ALSO IGNORE THIS LETTER AND RESPECT
>OUR TRUST IN YOU BY NOT EXPOSING THIS TRANSACTION,
>EVEN IF YOU ARE NOT INTERESTED.LOOK FORWARD TO WORKING
>WITH YOU. THANK YOU.
>
>TRULY YOURS,
>
>BARRISTER KAKA MBANA ESQ.
>
>
>
>
>
>--======24934==61103======--
More information about the MailScanner
mailing list