Showing the spamassassin Score

Billy A. Pumphrey bpumphrey at WOODMACLAW.COM
Thu Jan 29 16:12:57 GMT 2004


Ok cool, does that mean that the big text below is a part of
spamassassin still, but MailScanner don't let it do it?

-----Original Message-----
From: Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK] 
Sent: Thursday, January 29, 2004 11:05 AM
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: Showing the spamassassin Score

At 16:05 29/01/2004, you wrote:
>I'm not able to see this on my mailscanner.  How do I turn this on so
>that the spam gets tagged with the following?

The spam reports from SpamAssassin are all put in the headers by
MailScanner. It doesn't modify the original message body.


>Spam detection software, running on the system "owl.dns-nac-zone.com",
>has
>identified this incoming email as possible spam.  The original message
>has been attached to this so you can view it (if it isn't spam) or
block
>similar future email.  If you have any questions, see
>the administrator of that system for details.
>
>Content preview:  Find Real Estate For Pennies On The Dollar! Get Your
>   FREE VIDEO U.S. Government Tax Certificates The smartest way to
invest
>   [...]
>
>Content analysis details:   (13.6 points, 5.0 required)
>
>  pts rule name              description
>---- ----------------------
>--------------------------------------------------
>  1.1 CLICK_TO_REMOVE_1      BODY: Click to be removed
>  0.1 HTML_FONTCOLOR_UNSAFE  BODY: HTML font color not in safe 6x6x6
>palette
>  0.1 HTML_LINK_CLICK_HERE   BODY: HTML link text says "click here"
>  0.3 HTML_SHOUTING4         BODY: HTML has very strong "shouting"
markup
>  0.1 HTML_TAG_EXISTS_TBODY  BODY: HTML has "tbody" tag
>  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME
parts
>  0.1 HTML_FONTCOLOR_BLUE    BODY: HTML font color is blue
>  0.1 HTML_FONT_BIG          BODY: HTML has a big font
>  0.0 HTML_MESSAGE           BODY: HTML included in message
>  0.7 MIME_HTML_NO_CHARSET   RAW: Message text in HTML without charset
>  0.8 BIZ_TLD                URI: Contains a URL in the BIZ top-level
>domain
>  0.8 REMOVE_PAGE            URI: URL of page called "remove"
>  0.5 FORGED_YAHOO_RCVD      'From' yahoo.com does not match 'Received'
>headers
>  2.5 RCVD_IN_DYNABLOCK      RBL: Sent directly from dynamic IP address
>                             [213.47.166.174 listed in dnsbl.sorbs.net]
>  0.1 RCVD_IN_SORBS          RBL: SORBS: sender is listed in SORBS
>                             [213.47.166.174 listed in dnsbl.sorbs.net]
>  1.1 RCVD_IN_DSBL           RBL: Received via a relay in list.dsbl.org
>
>[<http://dsbl.org/listing?ip=213.47.166.174>]
>  2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
>               [Blocked - see
><http://www.spamcop.net/bl.shtml?213.47.166.174>]
>  0.0 CLICK_BELOW            Asks you to click below
>  1.7 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML
tag
>  1.1 MIME_HTML_ONLY_MULTI   Multipart message only has text/html MIME
>parts

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.




More information about the MailScanner mailing list