Spamassassin negative score? {Scanned}

Peter Nitschke email at
Wed Jan 14 16:24:50 GMT 2004

Was just reading on the SA list that apparently this is a giveaway.

> X-Mailer: mPOP Web-Mail 2.19

So suggested rule to add to SA is:

header    RM_hxm_mPOPwebMail     X-Mailer =~ /mPOP Web-Mail/
score   RM_hxm_mPOPwebMail      5.0


*********** REPLY SEPARATOR  ***********

On 14/01/2004 at 9:57 AM SW wrote:

>Hi folks,
>I'm just trying to figure out how lately lots of spam gets a 'negative'
>score resulting in not being seen as spam? Do I need to make some changes
>Mailscanner.conf to fix this problem or is this a known loophole spammers
>Here is an example of an e-mail w/ a Spamassassin score of -4.7:
>Return-Path: <bqwkhmczr at>
>Received: from
>(JeW_91122_ at [] (may be forged))
> by (8.10.2/8.10.2) with SMTP id i0EDvdf00591
> for <ae at>; Wed, 14 Jan 2004 08:57:39 -0500
>Received: from [] by 3001hosting.comIP with HTTP;
> Wed, 14 Jan 2004 14:49:27 +0100
>From: "Chasity" <bqwkhmczr at>
>To: ae at
>Subject: Re: YQBNAMQ, voice resounded over {Scanned}
>Mime-Version: 1.0
>X-Mailer: mPOP Web-Mail 2.19
>X-Originating-IP: [3001hosting.comIP]
>Date: Wed, 14 Jan 2004 14:58:27 +0100
>Reply-To: "Sorensen" <bqwkhmczr at>
>Content-Type: multipart/alternative;
> boundary="--ALT--VKRT28948427261974"
>Message-Id: <KUHJGFR-0003467606015 at cruelty>
>X-WPPi-MailScanner-Information: Please contact WPPi for more information
>X-WPPi-MailScanner: Found to be clean
>X-WPPi-MailScanner-SpamCheck: not spam, SpamAssassin (score=-4.7, required
> BAYES_00 -4.90, HTML_MESSAGE 0.10, NORMAL_HTTP_TO_IP 0.10)
>X-UIDL: joV"!$mT"!"!E!!%!3!!
>        |        WPPi.Net
>   |
> & WPPi.Net MailScanner Signature
>This message has been scanned for viruses
>and dangerous content by WPPi MailScanner,
>and has been found to be clean.

More information about the MailScanner mailing list