Showing the spamassassin Score

Julian Field mailscanner at ecs.soton.ac.uk
Thu Jan 29 16:05:01 GMT 2004


At 16:05 29/01/2004, you wrote:
>I'm not able to see this on my mailscanner.  How do I turn this on so
>that the spam gets tagged with the following?

The spam reports from SpamAssassin are all put in the headers by
MailScanner. It doesn't modify the original message body.


>Spam detection software, running on the system "owl.dns-nac-zone.com",
>has
>identified this incoming email as possible spam.  The original message
>has been attached to this so you can view it (if it isn't spam) or block
>similar future email.  If you have any questions, see
>the administrator of that system for details.
>
>Content preview:  Find Real Estate For Pennies On The Dollar! Get Your
>   FREE VIDEO U.S. Government Tax Certificates The smartest way to invest
>   [...]
>
>Content analysis details:   (13.6 points, 5.0 required)
>
>  pts rule name              description
>---- ----------------------
>--------------------------------------------------
>  1.1 CLICK_TO_REMOVE_1      BODY: Click to be removed
>  0.1 HTML_FONTCOLOR_UNSAFE  BODY: HTML font color not in safe 6x6x6
>palette
>  0.1 HTML_LINK_CLICK_HERE   BODY: HTML link text says "click here"
>  0.3 HTML_SHOUTING4         BODY: HTML has very strong "shouting" markup
>  0.1 HTML_TAG_EXISTS_TBODY  BODY: HTML has "tbody" tag
>  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
>  0.1 HTML_FONTCOLOR_BLUE    BODY: HTML font color is blue
>  0.1 HTML_FONT_BIG          BODY: HTML has a big font
>  0.0 HTML_MESSAGE           BODY: HTML included in message
>  0.7 MIME_HTML_NO_CHARSET   RAW: Message text in HTML without charset
>  0.8 BIZ_TLD                URI: Contains a URL in the BIZ top-level
>domain
>  0.8 REMOVE_PAGE            URI: URL of page called "remove"
>  0.5 FORGED_YAHOO_RCVD      'From' yahoo.com does not match 'Received'
>headers
>  2.5 RCVD_IN_DYNABLOCK      RBL: Sent directly from dynamic IP address
>                             [213.47.166.174 listed in dnsbl.sorbs.net]
>  0.1 RCVD_IN_SORBS          RBL: SORBS: sender is listed in SORBS
>                             [213.47.166.174 listed in dnsbl.sorbs.net]
>  1.1 RCVD_IN_DSBL           RBL: Received via a relay in list.dsbl.org
>
>[<http://dsbl.org/listing?ip=213.47.166.174>]
>  2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
>               [Blocked - see
><http://www.spamcop.net/bl.shtml?213.47.166.174>]
>  0.0 CLICK_BELOW            Asks you to click below
>  1.7 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
>  1.1 MIME_HTML_ONLY_MULTI   Multipart message only has text/html MIME
>parts

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



More information about the MailScanner mailing list