Showing the spamassassin Score
Julian Field
mailscanner at ecs.soton.ac.uk
Thu Jan 29 16:13:35 GMT 2004
At 16:12 29/01/2004, you wrote:
>Ok cool, does that mean that the big text below is a part of
>spamassassin still, but MailScanner don't let it do it?
MailScanner won't generate the huge report you included below. I reckoned
that thing was so big and ugly hardly anyone would really want it anyway.
If you have enough time in your day to read huge great spam reports on
every email you get, you should get out more! :-)
>-----Original Message-----
>From: Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK]
>Sent: Thursday, January 29, 2004 11:05 AM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: Showing the spamassassin Score
>
>At 16:05 29/01/2004, you wrote:
> >I'm not able to see this on my mailscanner. How do I turn this on so
> >that the spam gets tagged with the following?
>
>The spam reports from SpamAssassin are all put in the headers by
>MailScanner. It doesn't modify the original message body.
>
>
> >Spam detection software, running on the system "owl.dns-nac-zone.com",
> >has
> >identified this incoming email as possible spam. The original message
> >has been attached to this so you can view it (if it isn't spam) or
>block
> >similar future email. If you have any questions, see
> >the administrator of that system for details.
> >
> >Content preview: Find Real Estate For Pennies On The Dollar! Get Your
> > FREE VIDEO U.S. Government Tax Certificates The smartest way to
>invest
> > [...]
> >
> >Content analysis details: (13.6 points, 5.0 required)
> >
> > pts rule name description
> >---- ----------------------
> >--------------------------------------------------
> > 1.1 CLICK_TO_REMOVE_1 BODY: Click to be removed
> > 0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6
> >palette
> > 0.1 HTML_LINK_CLICK_HERE BODY: HTML link text says "click here"
> > 0.3 HTML_SHOUTING4 BODY: HTML has very strong "shouting"
>markup
> > 0.1 HTML_TAG_EXISTS_TBODY BODY: HTML has "tbody" tag
> > 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME
>parts
> > 0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue
> > 0.1 HTML_FONT_BIG BODY: HTML has a big font
> > 0.0 HTML_MESSAGE BODY: HTML included in message
> > 0.7 MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset
> > 0.8 BIZ_TLD URI: Contains a URL in the BIZ top-level
> >domain
> > 0.8 REMOVE_PAGE URI: URL of page called "remove"
> > 0.5 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received'
> >headers
> > 2.5 RCVD_IN_DYNABLOCK RBL: Sent directly from dynamic IP address
> > [213.47.166.174 listed in dnsbl.sorbs.net]
> > 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
> > [213.47.166.174 listed in dnsbl.sorbs.net]
> > 1.1 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
> >
> >[<http://dsbl.org/listing?ip=213.47.166.174>]
> > 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
>bl.spamcop.net
> > [Blocked - see
> ><http://www.spamcop.net/bl.shtml?213.47.166.174>]
> > 0.0 CLICK_BELOW Asks you to click below
> > 1.7 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML
>tag
> > 1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME
> >parts
>
>--
>Julian Field
>www.MailScanner.info
>MailScanner thanks transtec Computers for their support
>
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>--
>This message has been scanned for viruses and
>dangerous content by MailScanner, and is
>believed to be clean.
>MailScanner thanks transtec Computers for their support.
--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
More information about the MailScanner
mailing list