delivery spam as attachement
Patrick Steiner
patricksteiner at BLUEWIN.CH
Mon Mar 17 21:01:53 GMT 2003
Please add e function that i can set the delivery mode to attached. then
every spammail
is deliverit as attachement (like amavis). at the bottom you can see the
mail that is generated
by amavis. this is useful for spammails with including external htmlcode
(sorry for my bad english)
English:
=======
This mail is probably spam. The original message has been attached
along with this report. Please report problems directly to sysman.
Content analysis details: (52.90 points, 4.4 required)
FROM_ENDS_IN_NUMS (0.7 points) From: ends in numbers
X_PRIORITY_HIGH (2.0 points) Sent with 'X-Priority' set to high
MSGID_SPAMSIGN_6LETTER (4.4 points) Message-Id generated by spam tool
(6-letter variant)
MIME_ODD_CASE (4.3 points) MiME-Version header (oddly capitalized)
RCVD_FAKE_HELO_DOTCOM (2.3 points) Received contains a faked HELO hostname
SUBJ_HAS_SPACES (2.0 points) Subject contains lots of white space
HTML_SHOUTING9 (2.7 points) BODY: HTML has very strong "shouting"
markup
HTML_FONT_BIG (0.1 points) BODY: FONT Size +2 and up or 3 and up
HTML_70_80 (0.4 points) BODY: Message is 70% to 80% HTML
HTML_FONT_COLOR_RED (0.1 points) BODY: HTML font color is red
HTML_IMAGE_ONLY_06 (1.1 points) BODY: HTML has images with 400-600 bytes of
words
HTML_MESSAGE (0.1 points) BODY: HTML included in message
HIDE_WIN_STATUS (2.2 points) BODY: Javascript to hide URLs in browser
MIME_MISSING_BOUNDARY (0.8 points) RAW: MIME section missing boundary
BASE64_ENC_TEXT (1.7 points) RAW: Message text disguised using base-64
encoding
NORMAL_HTTP_TO_IP (0.5 points) URI: Uses a dotted-decimal IP address in
URL
MSGID_OUTLOOK_TIME (4.4 points) Message-Id is fake (in Outlook Express
format)
FORGED_AOL_RCVD (4.3 points) Received forged, contains fake AOL relays
FORGED_RCVD_TRAIL (1.8 points) trail of Received: headers seems to be
forged
FORGED_YAHOO_RCVD (2.3 points) 'From' yahoo.com does not match 'Received'
headers
SUBJ_HAS_UNIQ_ID (0.8 points) Subject contains a unique ID
MULTI_FORGED (4.3 points) Received headers indicate multiple
forgeries
FORGED_MUA_AOL (3.8 points) Forged mail pretending to be from AOL
MIME_HTML_ONLY (0.1 points) Message only has text/html MIME parts
MISSING_MIMEOLE (0.5 points) Message has X-MSMail-Priority, but no
X-MimeOLE
MISSING_OUTLOOK_NAME (0.9 points) Message looks like Outlook, but isn't
CONFIRMED_FORGED (4.3 points) Received headers are forged
The original message did not contain plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
More information about the MailScanner
mailing list