Using 2.42 I get:
X-Spam-Status: Yes, hits=8.4 required=5.9
tests=CTYPE_JUST_HTML,MSGID_CHARS_SPAM,RAZOR2_CHECK,RCVD_IN_DSBL,
SPAM_PHRASE_00_01
version=2.42
It's very obvious this spammer was trying hard to avoid detection, note the mangling present in "r ap -ed" to prevent string matching of porn/spam filters.
SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam. The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM:
SPAM: Content analysis details: (8.40 hits, 5.9 required)
SPAM: MSGID_CHARS_SPAM (0.1 points) Message-Id has characters indicating spam
SPAM: SPAM_PHRASE_00_01 (0.8 points) BODY: Spam phrases score is 00 to 01 (low)
SPAM: RAZOR2_CHECK (3.9 points) Listed in Razor2, see http://razor.sf.net/
SPAM: RCVD_IN_DSBL (3.2 points) RBL: Received via a relay in list.dsbl.org
SPAM: [RBL check: found 218.82.47.212.list.dsbl.org]
SPAM: CTYPE_JUST_HTML (0.4 points) HTML-only mail, with no text version
SPAM:
SPAM: -------------------- End of SpamAssassin results ---------------------
At 12:56 PM 10/11/2002 -0700, you wrote:
But geez, I'd imagine this would be otherwise hard to catch. I see these once in a while. Reeeeeally short spam emails.. I'm serious. Below is the entire spam.Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: from korzh.com (lan-a-218.adsl.alcom.co.uk [212.47.82.218]) by mail.pbp.net (Postfix) with SMTP id D7D283688C for <[EMAIL PROTECTED]>; Fri, 11 Oct 2002 06:42:58 -0700 (PDT) Date: Sun, 06 Oct 2002 22:51:43 -0400 From: "Yanka J. Nasill" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Content-type: text/html Message-ID: <[EMAIL PROTECTED]> Subject: Terrible fscks! X-Spam-Status: No, hits=3.3 required=5.0 tests=CTYPE_JUST_HTML,MSGID_CHARS_SPAM,SPAM_PHRASE_00_01 version=2.41 X-Spam-Level: *** <body><a href="http://afdxlatxya.turbotrah.com";>r ap -ed victims</a></body> ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
