[Fwd: do you want to invest money ?] - MailScanner did notdetect?

Billy A. Pumphrey bpumphrey at WoodMacLaw.com
Fri Mar 31 21:39:25 IST 2006


> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Billy A. Pumphrey
> Sent: Thursday, March 30, 2006 10:21 AM
> To: MailScanner discussion
> Subject: RE: [Fwd: do you want to invest money ?] - MailScanner did
> notdetect?
> 
> 
> > -----Original Message-----
> > From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-
> > bounces at lists.mailscanner.info] On Behalf Of Jose Nathaniel G.
> Nengasca
> > Sent: Wednesday, March 29, 2006 1:53 AM
> > To: MailScanner discussion
> > Subject: [Fwd: do you want to invest money ?] - MailScanner did not
> > detect?
> >
> > Seems that MailScanner didnt detected this? is this new type of
scam?
> > pls help..
> >
> 
> Here was my score:
> 
> SpamAssassin Score: 4.52
> Spam Report: Score Matching Rule Description
> -2.60 BAYES_00 Bayesian spam probability is 0 to 1%
> 0.00 HTML_MESSAGE HTML included in message
> 1.72 MSGID_DOLLARS Message-Id has pattern used in spam
> -0.00 NO_RELAYS Informational: message was not relayed via SMTP
> 1.91 RATWARE_MS_HASH Bulk email fingerprint (msgid ms hash) found
> 2.78 RATWARE_OUTLOOK_NONAME Bulk email fingerprint (Outlook no name)
> found
> 0.72 SARE_HTML_TITLE_MNY HTML Title implies this may be spam
> 
> 
> I will try those extra rules.
> --

Funny....
I put the mangled rule on there and ran it the other day and the score
was no different than the above.

I did it today and got this:

-0.68 AWL From: address is in the auto white-list 
-2.60 BAYES_00 Bayesian spam probability is 0 to 1% 
0.23 FS_START_DOYOU   
1.13 FS_START_DOYOU2   
0.00 HTML_MESSAGE HTML included in message 
1.72 MSGID_DOLLARS Message-Id has pattern used in spam 
-0.00 NO_RELAYS Informational: message was not relayed via SMTP 
1.91 RATWARE_MS_HASH Bulk email fingerprint (msgid ms hash) found 
2.78 RATWARE_OUTLOOK_NONAME Bulk email fingerprint (Outlook no name)
found 
0.72 SARE_HTML_TITLE_MNY HTML Title implies this may be spam

I am putting in the rules correctly aren't I:
wget the rule and put it in etc/mail/spamassassin
do a lint spamassassin -D --lint -p
/etc/MailScanner/spam.assassin.prefs.conf

do a mailscanner restart

??


More information about the MailScanner mailing list