On Mon, 2003-03-03 at 21:15, Mike Wetzel wrote:

> SPAM: -------------------- Start SpamAssassin results ----------------------
> SPAM: This mail is probably spam. The original message has been altered
> SPAM: so you can recognise or block similar unwanted mail in future.
> SPAM: See http://spamassassin.org/tag/ for more details.
> SPAM:
> SPAM: Content analysis details: (11.00 hits, 5 required)
> SPAM: USER_AGENT (-0.5 points) Found a User-Agent header
> SPAM: ALL_CAP_PORN (1.2 points) BODY: Possible porn - in ALL CAPS
> SPAM: SPAM_PHRASE_13_21 (1.3 points) BODY: Spam phrases score is 13 to 21 (high)
> SPAM: [score: 14]
> SPAM: TABLE_THICK_BORDER (0.4 points) BODY: HTML table has thick border
> SPAM: BIG_FONT (0.3 points) BODY: FONT Size +2 and up or 3 and up
> SPAM: HTML_FONT_FACE_ODD (0.3 points) BODY: HTML font face is not a commonly used face
> SPAM: HTML_WITH_BGCOLOR (0.3 points) BODY: HTML mail with non-white background
> SPAM: HTML_COMMENT_UNIQUE_ID (0.1 points) BODY: Contains a comment with nothing but unique ID
> SPAM: OBFUSCATING_COMMENT (2.1 points) BODY: HTML comments which obfuscate text
> SPAM: NUMERIC_HTTP_ADDR (2.1 points) URI: Uses a numeric IP address in URL
> SPAM: HTTP_USERNAME_USED (1.5 points) URI: Uses a username in a URL
> SPAM: WEIRD_PORT (1.2 points) URI: Uses non-standard port number for HTTP
> SPAM: HTTP_ESCAPED_HOST (0.7 points) URI: Uses %-escapes inside a URL's hostname
> SPAM:
> SPAM: -------------------- End of SpamAssassin results ---------------------
>
> Hello everyone,
>
> a few days ago I got an interesting spam, I was looking over it again
> and again but found no point how to create a rule to block this for
> the next time.=20

As you can see, spamassassin gets it even though it's enclosed in your
message. Maybe the comments will help you find a criterium if you don't
want to use spamassassin yourself.

               Oliver Sturm

-- 
omnibus ex nihilo ducendis sufficit unum
Jabber sturmamessage.de ICQ 27142619 MSN macnapplehotmail.com Y! macnapple

-----BEGIN PGP SIGNATURE----- Comment: Find my public key at http://www.sturmnet.org/pgpkeys/oliver

iD8DBQA+Y7kwcW0sNgkj3q0RAiFYAJ41AaQGugTR7HXCXua8VTD/aEfGjACghWa/ MjGsPq0tG70EZGd7UNyYEk4= =i6F8 -----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]