[Fwd: do you want to invest money ?] - MailScanner did not
detect?
Martin Hepworth
martinh at solid-state-logic.com
Wed Mar 29 09:12:53 IST 2006
Jose
Works fine for me - here's the spamassassin rules that hit..
Content analysis details: (65.3 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
-0.0 NO_RELAYS Informational: message was not relayed via SMTP
2.5 MISSING_HB_SEP Missing blank line between message header and
body
2.3 MANGLED_FREE BODY: mangled free
2.3 MANGLED_LIST BODY: mangled list
2.3 MANGLED_OFF BODY: mangled off
2.3 MANGLED_DOMAIN BODY: mangled domain
1.0 SARE_OBFUMONEY2 BODY: masked spam word(s)
2.3 MANGLED_FORM BODY: mangled form
2.3 MANGLED_FROM BODY: mangled from
2.3 MANGLED_VISIT BODY: mangled visit
2.3 MANGLED_ACCNT BODY: mangled account(s)
2.3 MANGLED_TEXT BODY: mangled text
2.3 MANGLED_LOOK BODY: mangled look(s)
2.3 MANGLED_WANT BODY: mangled want
2.3 MANGLED_SPAM BODY: mangled spam
2.3 MANGLED_PRIOR BODY: mangled prior
2.3 MANGLED_PLEASE BODY: mangled please
2.3 MANGLED_TRNFER BODY: mangled TRANSFER
2.3 MANGLED_LOW BODY: mangled low
2.3 MANGLED_MONEY BODY: mangled money
2.3 MANGLED_TOOL BODY: mangled tool
5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 0.9991]
0.5 SARE_HTML_MLINE_HTTP RAW: MULTI-line http
1.8 MISSING_SUBJECT Missing Subject: header
1.7 SARE_OBFU_VISIT2 found apparent obfuscation of word used in spam
5.8 BODY_OBFU_WINDOWS Attempt to obfuscated the word 'windows'
1.0 UOLCC_DOWN Drugs downwards
0.1 TO_CC_NONE No To: or Cc: header
2.5 FM_NO_FROM_OR_TO FM_NO_FROM_OR_TO
-0.0 NO_RECEIVED Informational: message has no Received headers
0.5 FM_NO_TO FM_NO_TO
1.1 FM_MULTI_ODD2 FM_MULTI_ODD2
You'll find the MANGLED rules in
http://www.rulesemporium.com/other-rules.htm/mangled.cf
There's loads of other useful SA rules at that site too..
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Jose Nathaniel G. Nengasca
> Sent: 29 March 2006 07:53
> To: MailScanner discussion
> Subject: [Fwd: do you want to invest money ?] - MailScanner did not
> detect?
>
> Seems that MailScanner didnt detected this? is this new type of scam?
> pls help..
>
> --
> All messages that are coming from this domain
> is certified to be virus and spam free. If
> ever you have received any virus infected
> content or spam, please report it to the
> internet administrator of this domain
> nats at sscrmnl.edu.ph
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.
**********************************************************************
More information about the MailScanner
mailing list