Mailscanner vs Spamassassin settings for changing the message headers

Boulytchev, Vasiliy vboulytchev at COINFOTECH.COM
Fri Oct 3 18:48:08 IST 2003


Ladies and Gents,
        We are in the process of migrating from Spamassassin to Mailscanner (using spamassasin).  The last obstacle we have to overcome, is how the spam message looks to the end user.  It gets tagged as SPAM and SCORE in the subject.  So thats working.  The difference people will see is how the body of the message looks.  The SPAM is always attached, but the old body looked like this:

*****************************************************************************
Content preview:  Copy Any DVD to CD, Easy - Fast - Convenient! You will
  be astonished by what this new, revolutionary software has to offer.
  Fastest Possible Technology 3-Click System Ready in less than 1 min.
  Immediate Download Full Money-back Guarantee Free Lifetime Support and
  Updates [...] 

This mail is probably spam.  The original message has been attached along with this report, so you can recognize or block similar unwanted mail in future.  See http://spamassassin.org/tag/ for more details.

Content analysis details:   (7.20 points, 6 required)
CLICK_BELOW_CAPS   (0.5 points)  BODY: Asks you to click below (in capital letters)
BANG_MORE          (0.7 points)  BODY: Talks about more with an exclamation!
HTML_60_70         (0.1 points)  BODY: Message is 60% to 70% HTML
HTML_MESSAGE       (0.1 points)  BODY: HTML included in message
HTML_LINK_CLICK_CAPS (1.1 points)  BODY: HTML link text says "CLICK"
HTML_FONT_BIG      (0.3 points)  BODY: FONT Size +2 and up or 3 and up
HTML_FONT_COLOR_BLUE (0.1 points)  BODY: HTML font color is blue HTML_LINK_CLICK_HERE (0.1 points)  BODY: HTML link text says "click here" HTML_FONT_COLOR_GRAY (0.1 points)  BODY: HTML font color is gray FORGED_MUA_OUTLOOK (3.5 points)  Forged mail pretending to be from MS Outlook
MIME_HTML_ONLY     (0.1 points)  Message only has text/html MIME parts
MISSING_MIMEOLE    (0.5 points)  Message has X-MSMail-Priority, but no X-MimeOLE

The original message did not contain plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam.  If you wish to view it, it may be safer to save it to a file and open it with an editor.
******************************************************(actual spam attached)

So, as you all see we had 2 userful features that everyone got really used to.  First being the quick preview (very useful for Outlook clients) and second being the Score explanations.  Now our SPAM looks like this:

**********************************************
Our MailScanner believes that the attachment to this message sent to you
   
    From: quickresponse837a at quicksponder.biz
 Subject: Vasiliy, You Have Made A Great Decision

is Unsolicited Commerial Email (spam). Unless you are sure that this message
is incorrectly thought to be spam, please delete this message without opening
it. Opening spam messages might allow the spammer to verify your email
address.

If you believe that this message has been incorrectly marked a spam, please
forward this email to postmaster.
********************************************  (spam attached)


We had to rewrite some perl to get SPAMSCORE in the subject.  Should we expect the same?  Where do you suggest we start?

THANKS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Vasiliy Boulytchev
Colorado Information Technologies, Inc.
http://www.coinfotech.com




More information about the MailScanner mailing list