Mailscanner does not identify attachment in mail
Koopmann, Jan-Peter
Jan-Peter.Koopmann at seceidos.de
Fri May 5 11:05:02 IST 2006
On Friday, May 05, 2006 10:53 AM Anthony Peacock wrote:
> We would really need to see which SA rules hit. (Sorry if you
> provided that in an earlier post, I didn't keep a copy).
5.00 BAYES_99 Bayesian spam probability is 99 to 100%
0.34 FB_SINGLE_0WORD
1.01 FB_SINGLE_1WORD
1.39 FB_WORD2_END_DOLLAR
0.59 FB_WORD_01DOLLAR2
1.25 FH_RELAY_NODNS
1.10 FM_MULTI_ODD2
0.70 FM_MULTI_ODD3
0.70 FM_MULTI_ODD4
0.90 FM_MULTI_ODD5
3.20 FM_N0N0_WORDS
0.55 HELO_MISMATCH_COM
0.96 NO_REAL_NAME From: does not include a real name
2.10 OBSCURED_EMAIL Message seems to contain rot13ed address
0.99 RELAY_IS_203
2.00 SARE_RAND_6
0.42 SARE_RMML_Stock9
5.00 SARE_URI_EQUALS
2.00 SPF_FAIL SPF: sender does not match SPF record (fail)
2.80 UNWANTED_LANGUAGE_BODY Message written in an undesired language
0.37 UPPERCASE_50_75 message body is 50-75% uppercase
1.37 USERPASS URL contains username and (optional) password
0.21 X_AUTH_WARN_FAKED X-Authentication-Warning header looks faked
> I doubt whether it is the fact that it is a UUencoded post is the
> only factor.
Not the only factor I agree. But BAYES_99, SARE_*, UNWANTED_LANGUAGE_BODY,
UPPERCASE etc. surely are due to uuencoded text since that is the only thing
in the body.
Regards,
JP
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3104 bytes
Desc: not available
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060505/cf639811/smime.bin
More information about the MailScanner
mailing list