<html>
<body>
Enquiries of this sort and suggestions for extra traps in SpamAssassin
really belong on the SAtalk mailing list run by the SpamAssassin
developers.<br><br>
We can't really help you here, except to say that it is obviously a very
well constructed spam message.<br><br>
At 08:30 02/07/2003, you wrote:<br>
<blockquote type=cite class=cite cite>How did this mail only get 1.3 by
spamassassin?<br><br>
I am using mailscanner 4.21-9 and spamassassin 2.55<br><br>
Jan Elmqvist Nielsen<br>
Received: from ns.ah.dk<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (ns2.ah.dk
[80.209.17.32])<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by ahpost.ah.dk; Wed, 02 Jul
2003 06:23:02 +0200<br>
Received: from ns3.ah.dk (ns3.ah.dk [80.209.17.33])<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by ns.ah.dk (8.11.6/8.11.6)
with ESMTP id h624UiD31893<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; for &lt;dof@sofi.ah.dk&gt;;
Wed, 2 Jul 2003 06:30:44 +0200<br>
Received: (from root@localhost)<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by ns3.ah.dk (8.11.6/8.11.6)
id h624YFR00858<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; for dof@sofi.ah.dk.KAV; Wed, 2
Jul 2003 06:34:15 +0200<br>
Received: (from root@localhost)<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by ns3.ah.dk (8.11.6/8.11.6)
id h624YEj00848<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; for dof@ah.dk.KAV; Wed, 2 Jul
2003 06:34:14 +0200<br>
Received: from openconnect.ch (h0010a40e4183.ne.client2.attbi.com
[66.31.163.55])<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by ns3.ah.dk (8.11.6/8.11.6)
with ESMTP id h624YDp00840<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; for &lt;dof@ah.dk&gt;; Wed, 2
Jul 2003 06:34:13 +0200<br>
Subject: I know all about you<br>
User-Agent: Mozilla/5.048 (X11; U; FreeBSD i386; U; NT4.0; en-us)
Gecko/25250101<br>
X-Accept-Language: en<br>
MIME-Version: 1.0<br>
Message-ID: &lt;3F025DD8.0EC9CBA8@mecanica.upm.es&gt;<br>
Date: Wed, 02 Jul 2003 03:21:44 -0100<br>
From: &quot;Normand Noble&quot; &lt;noble_xn@mecanica.upm.es&gt;<br>
To: dof@ah.dk<br>
Content-Type: text/html<br>
X-MailScanner-Information: Please contact the ISP for more
information<br>
X-MailScanner: Found to be clean<br>
X-MailScanner-SpamCheck: ikke spam, SpamAssassin (bedømmelse=1.3,
påkrævet 3,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HTML_50_60 0.55, HTML_FONT_BIG
0.27, HTML_FONT_COLOR_RED 0.10,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HTML_MESSAGE 0.10,
HTML_RELAYING_FRAME 0.27, MIME_HTML_ONLY 0.10,<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; USER_AGENT_MOZILLA_UA 0.00,
X_ACCEPT_LANG -0.10)<br>
X-MailScanner-SpamScore: s<br>
Content-Transfer-Encoding: 8bit<br><br>
<div align="center"><font face="Verdana" size=5>NEVER AGAIN BE
EMBARRASSED ABOUT YOUR SIZE<br><br>
</font><font face="Verdana" size=4 color="#FF0000">VPlb2mr-RX has helped
over 700,000 men worldwide<br>
Some benefits include:<br>
</font><font face="Verdana">* Gain up to 3 Full Inches in Length<br>
* Expand Your Pen5t669is up to 20% Thicker<br>
* Stop Premature Ejacuvhfi7lation!<br>
* Produce Stronger, Rock Hard Eretdxcrctions<br>
* 100% Safe To Take, With NO Side Effxgjshects<br>
* Fast Priority Shipping Worldwide<br>
* Doctor Approved and Recomoy7tymended<br>
* No Pumps! No Surgery! No Exnylrrercises!<br><br>
<br>
</font><font face="Verdana" size=4 color="#FF0000"><a href="http://www.cheaponnet1.com/mka/m2c.php?man=bnkj4s">Don't
wait another day, More Info here!</a></font><font face="Verdana"><br>
* 100% Money Back Guaranw725hteed<br><br>
<a href="http://www.cheaponnet1.com/bek/">Remove me from the list</a>
</font></div>
</blockquote></body>
<br>
<div>-- </div>
<div>Julian Field</div>
<div><a href="http://www.mailscanner.info/" EUDORA=AUTOURL>www.MailScanner.info</a></div>
MailScanner thanks transtec Computers for their support
</html>