This message to the Babylon 5 Mailing list got flagged as spam, mostly due to
the 4-point match for %-escapes in an URL (HTTP_ESCAPED_HOST):

20_body_tests.cf:rawbody HTTP_ESCAPED_HOST       /http\:\/\/[^\/]*%/

To make the regexp more valid, it should be something like:

/http\:\/\/[^\/\s:]*\%/

That will stop the search at a whitespace (invalid in an URL), a colon
(signifies the end of the hostname and will have a port following it), or a /
(signifies the beginning of the document path for the URL.)

----- Forwarded message from [EMAIL PROTECTED] -----

Return-Path: <[EMAIL PROTECTED]>
Received: from earth.cs.columbia.edu (earth.cs.columbia.edu [128.59.16.33])
        by eclectic.kluge.net (8.11.6/8.11.6) with ESMTP id g1I9Yfk26009
        for <[EMAIL PROTECTED]>; Mon, 18 Feb 2002 04:34:41 -0500
Received: from cs.columbia.edu ([128.59.16.20])
        by earth.cs.columbia.edu with esmtp (Exim 3.22 #1)
        id 16ck2m-0007td-00; Mon, 18 Feb 2002 04:25:08 -0500
Received: from cosmos.cs.columbia.edu (cosmos.cs.columbia.edu [128.59.16.149])
        by cs.columbia.edu (8.9.3/8.9.3) with ESMTP id EAA02564
        for <[EMAIL PROTECTED]>; Mon, 18 Feb 2002 04:23:45 -0500 (EST)
Received: from shekel.mcl.cs.columbia.edu (shekel.mcl.cs.columbia.edu [128.59.18.15])
        by cosmos.cs.columbia.edu (8.9.3/8.9.3) with ESMTP id EAA25392
        for <[EMAIL PROTECTED]>; Mon, 18 Feb 2002 04:23:43 -0500 (EST)
Received: from shekel.mcl.cs.columbia.edu (localhost [127.0.0.1])
        by shekel.mcl.cs.columbia.edu (8.12.1/8.12.1) with ESMTP id g1I9NiKs019321
        for <[EMAIL PROTECTED]>; Mon, 18 Feb 2002 04:23:44 -0500 (EST)
Received: (from ezk@localhost)
        by shekel.mcl.cs.columbia.edu (8.12.1/8.12.1/Submit) id g1I9Nhae019320;
        Mon, 18 Feb 2002 04:23:43 -0500 (EST)
Message-Id: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Newsgroups: rec.arts.sf.tv.babylon5.moderated
From: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Subject: [B5JMS] Dissention is unpatriotic ...
Sender: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
X-BeenThere: [EMAIL PROTECTED]
X-Mailman-Version: 2.0.6
Precedence: bulk
List-Help: <mailto:[EMAIL PROTECTED]?subject=help>
List-Post: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <http://lists.cs.columbia.edu/mailman/listinfo/b5jms>,
        <mailto:[EMAIL PROTECTED]?subject=subscribe>
List-Id: Posts of Babylon 5's creator Joe M. Straczynski <b5jms.cs.columbia.edu>
List-Unsubscribe: <http://lists.cs.columbia.edu/mailman/listinfo/b5jms>,
        <mailto:[EMAIL PROTECTED]?subject=unsubscribe>
List-Archive: <http://lists.cs.columbia.edu/pipermail/b5jms/>
Date: Mon, 18 Feb 2002 04:23:43 -0500 (EST)
X-Spam-Status: Yes, hits=5.2 required=5.0 tests=NO_REAL_NAME,HTTP_ESCAPED_HOST 
version=2.01
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.01 (devel $Id: SpamAssassin.pm,v 1.61 
2002/01/25 04:41:02 jmason Exp $)
X-Reject: Spamassassin match!
Status: RO
Content-Length: 2294
Lines: 60

SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam.  The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM: 
SPAM: Content analysis details:   (5.2 hits, 5 required)
SPAM: Hit! (1.2 points)  From: does not include a real name
SPAM: Hit! (4 points)    BODY: Uses %-escapes inside a URL's hostname
SPAM: 
SPAM: -------------------- End of SpamAssassin results ---------------------


=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
From: [EMAIL PROTECTED] (Cheryl Martin)
Date: 16 Feb 2002 21:44:55 GMT
Lines: 8

and misspelled. It should be "dissension".  

Cheryl
-- 
%   Moderator: rec.arts.sf.tv.babylon5.moderated, soc.personals  % 
%                http://www.grumpywitch.org                      %      
% Arizona Polyamory Info http://www.grumpywitch.org/azpoly.html  %


=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
From: [EMAIL PROTECTED] (Jms at B5)
Date: 17 Feb 2002 23:49:11 GMT
Lines: 25

Not to add to the furor more than necessary (though some might say the furor
the better)...I came across this in the Charlotte Observer, a mainstream paper
not exactly a bastion of liberalism, in an article by Jay Bookman.  This is the
lead....

""We need to execute people like John Walker in order to physically intimidate
liberals, by making them realize that they can be killed too," pundit Ann
Coulter told this month's meeting of the Conservative Political Action
Conference. "Otherwise they will turn out to be outright traitors."

"Appearing on Fox News a few days later, Coulter acknowledged the statement and
bragged that it had been a "huge hit with the audience," an estimated 3,500 who
turned out for the three-day conference in Arlington, Va., that bills itself as
the nation's "premier annual gathering of conservatives.""

 jms

([EMAIL PROTECTED])
(all message content (c) 2001 by synthetic worlds, ltd., 
permission to reprint specifically denied to SFX Magazine 
and don't send me story ideas)




_______________________________________________
B5JMS mailing list
[EMAIL PROTECTED]
http://lists.cs.columbia.edu/mailman/listinfo/b5jms

----- End forwarded message -----

-- 
Randomly Generated Tagline:
Perl has a long tradition of working around compilers.
              -- Larry Wall in <[EMAIL PROTECTED]>

_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to