Showing the spamassassin Score
Julian Field
mailscanner at ecs.soton.ac.uk
Thu Jan 29 16:05:01 GMT 2004
At 16:05 29/01/2004, you wrote:
>I'm not able to see this on my mailscanner. How do I turn this on so
>that the spam gets tagged with the following?
The spam reports from SpamAssassin are all put in the headers by
MailScanner. It doesn't modify the original message body.
>Spam detection software, running on the system "owl.dns-nac-zone.com",
>has
>identified this incoming email as possible spam. The original message
>has been attached to this so you can view it (if it isn't spam) or block
>similar future email. If you have any questions, see
>the administrator of that system for details.
>
>Content preview: Find Real Estate For Pennies On The Dollar! Get Your
> FREE VIDEO U.S. Government Tax Certificates The smartest way to invest
> [...]
>
>Content analysis details: (13.6 points, 5.0 required)
>
> pts rule name description
>---- ----------------------
>--------------------------------------------------
> 1.1 CLICK_TO_REMOVE_1 BODY: Click to be removed
> 0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6
>palette
> 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here"
> 0.3 HTML_SHOUTING4 BODY: HTML has very strong "shouting" markup
> 0.1 HTML_TAG_EXISTS_TBODY BODY: HTML has "tbody" tag
> 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
> 0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue
> 0.1 HTML_FONT_BIG BODY: HTML has a big font
> 0.0 HTML_MESSAGE BODY: HTML included in message
> 0.7 MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset
> 0.8 BIZ_TLD URI: Contains a URL in the BIZ top-level
>domain
> 0.8 REMOVE_PAGE URI: URL of page called "remove"
> 0.5 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received'
>headers
> 2.5 RCVD_IN_DYNABLOCK RBL: Sent directly from dynamic IP address
> [213.47.166.174 listed in dnsbl.sorbs.net]
> 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
> [213.47.166.174 listed in dnsbl.sorbs.net]
> 1.1 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
>
>[<http://dsbl.org/listing?ip=213.47.166.174>]
> 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
> [Blocked - see
><http://www.spamcop.net/bl.shtml?213.47.166.174>]
> 0.0 CLICK_BELOW Asks you to click below
> 1.7 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
> 1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME
>parts
--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
More information about the MailScanner
mailing list