Showing the spamassassin Score

Julian Field mailscanner at ecs.soton.ac.uk
Thu Jan 29 16:13:35 GMT 2004


At 16:12 29/01/2004, you wrote:
>Ok cool, does that mean that the big text below is a part of
>spamassassin still, but MailScanner don't let it do it?

MailScanner won't generate the huge report you included below. I reckoned
that thing was so big and ugly hardly anyone would really want it anyway.
If you have enough time in your day to read huge great spam reports on
every email you get, you should get out more! :-)


>-----Original Message-----
>From: Julian Field [mailto:mailscanner at ECS.SOTON.AC.UK]
>Sent: Thursday, January 29, 2004 11:05 AM
>To: MAILSCANNER at JISCMAIL.AC.UK
>Subject: Re: Showing the spamassassin Score
>
>At 16:05 29/01/2004, you wrote:
> >I'm not able to see this on my mailscanner.  How do I turn this on so
> >that the spam gets tagged with the following?
>
>The spam reports from SpamAssassin are all put in the headers by
>MailScanner. It doesn't modify the original message body.
>
>
> >Spam detection software, running on the system "owl.dns-nac-zone.com",
> >has
> >identified this incoming email as possible spam.  The original message
> >has been attached to this so you can view it (if it isn't spam) or
>block
> >similar future email.  If you have any questions, see
> >the administrator of that system for details.
> >
> >Content preview:  Find Real Estate For Pennies On The Dollar! Get Your
> >   FREE VIDEO U.S. Government Tax Certificates The smartest way to
>invest
> >   [...]
> >
> >Content analysis details:   (13.6 points, 5.0 required)
> >
> >  pts rule name              description
> >---- ----------------------
> >--------------------------------------------------
> >  1.1 CLICK_TO_REMOVE_1      BODY: Click to be removed
> >  0.1 HTML_FONTCOLOR_UNSAFE  BODY: HTML font color not in safe 6x6x6
> >palette
> >  0.1 HTML_LINK_CLICK_HERE   BODY: HTML link text says "click here"
> >  0.3 HTML_SHOUTING4         BODY: HTML has very strong "shouting"
>markup
> >  0.1 HTML_TAG_EXISTS_TBODY  BODY: HTML has "tbody" tag
> >  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME
>parts
> >  0.1 HTML_FONTCOLOR_BLUE    BODY: HTML font color is blue
> >  0.1 HTML_FONT_BIG          BODY: HTML has a big font
> >  0.0 HTML_MESSAGE           BODY: HTML included in message
> >  0.7 MIME_HTML_NO_CHARSET   RAW: Message text in HTML without charset
> >  0.8 BIZ_TLD                URI: Contains a URL in the BIZ top-level
> >domain
> >  0.8 REMOVE_PAGE            URI: URL of page called "remove"
> >  0.5 FORGED_YAHOO_RCVD      'From' yahoo.com does not match 'Received'
> >headers
> >  2.5 RCVD_IN_DYNABLOCK      RBL: Sent directly from dynamic IP address
> >                             [213.47.166.174 listed in dnsbl.sorbs.net]
> >  0.1 RCVD_IN_SORBS          RBL: SORBS: sender is listed in SORBS
> >                             [213.47.166.174 listed in dnsbl.sorbs.net]
> >  1.1 RCVD_IN_DSBL           RBL: Received via a relay in list.dsbl.org
> >
> >[<http://dsbl.org/listing?ip=213.47.166.174>]
> >  2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
>bl.spamcop.net
> >               [Blocked - see
> ><http://www.spamcop.net/bl.shtml?213.47.166.174>]
> >  0.0 CLICK_BELOW            Asks you to click below
> >  1.7 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML
>tag
> >  1.1 MIME_HTML_ONLY_MULTI   Multipart message only has text/html MIME
> >parts
>
>--
>Julian Field
>www.MailScanner.info
>MailScanner thanks transtec Computers for their support
>
>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>--
>This message has been scanned for viruses and
>dangerous content by MailScanner, and is
>believed to be clean.
>MailScanner thanks transtec Computers for their support.

--
Julian Field
www.MailScanner.info
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654



More information about the MailScanner mailing list