How to manually test an email?

[Chris Yuzik]

paul @ firespam wrote:
> Hi,
> 
> I've had quite a few random spams getting through my MailScanner servers 
> recently and I'd like to investigate a bit more...
> 
> I have saved a spam email that got through as a txt file with the full 
> headers.
> 
> How can I run this through MailScanner manually and see the output?
> 
> I know I can do:
>     spamassassin -t < /tmp/email.txt
> 
> but does this just do spamassassin checks or does it include the 
> MailScanner stuff too?

Paul,

I get a whopping 64.8 points:

Content analysis details:   (64.8 points, 5.0 required)

  pts rule name              description
---- ---------------------- 
--------------------------------------------------
   15 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                             [score: 1.0000]
  0.1 RDNS_NONE              Delivered to trusted network by a host with 
no rDNS
  4.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
              [Blocked - see 
<http://www.spamcop.net/bl.shtml?203.122.105.147>]
  3.5 FRT_PRICE              BODY: ReplaceTags: Price
  1.7 SARE_MLB_Stock5        BODY: Mentions stock symbol, tickers, or OTC.
  0.6 J_CHICKENPOX_32        BODY: 3alpha-pock-2alpha
  2.9 FRT_SYMBOL             BODY: ReplaceTags: Symbol
  0.6 J_CHICKENPOX_41        BODY: 4alpha-pock-1alpha
  1.7 TVD_FUZZY_SYMBOL       BODY: TVD_FUZZY_SYMBOL
  0.6 J_CHICKENPOX_15        BODY: 1alpha-pock-5alpha
  0.6 J_CHICKENPOX_43        BODY: 4alpha-pock-3alpha
  0.6 J_CHICKENPOX_42        BODY: 4alpha-pock-2alpha
  0.6 J_CHICKENPOX_33        BODY: 3alpha-pock-3alpha
  0.6 J_CHICKENPOX_52        BODY: 5alpha-pock-2alpha
  0.6 J_CHICKENPOX_25        BODY: 2alpha-pock-5alpha
  0.6 J_CHICKENPOX_23        BODY: 2alpha-pock-3alpha
  0.6 J_CHICKENPOX_14        BODY: 1alpha-pock-4alpha
  0.6 J_CHICKENPOX_31        BODY: 3alpha-pock-1alpha
  0.0 HS_INDEX_PARAM         URI: Link contains a common tracker pattern.
  0.0 HTML_MESSAGE           BODY: HTML included in message
   29 CRM114_CHECK           CRM114: message is SPAM with crm114-score 
-146.7300

Hope this helps you.

Cheers,
Chris