Daniel Quinlan <[EMAIL PROTECTED]> writes: > "Steve Thomas" <[EMAIL PROTECTED]> writes: > >>> It looks like you're looking for SUBJ_FULL_OF_8BITS. See if these messages >>> are triggering that rule. I /dev/null anything that hits on that one. > > Harry Putnam <[EMAIL PROTECTED]> writes: > >> None of those posted show having hit that rule. > > I can't tell if it's 7-bit random garbage, 8-bit random garbage, or > 8-bit random garbage stuff being converted to 7-bit garbage. > > Why? Because you have cut-and-pasted one or two headers (and not even > directly -- it's a screen shot!) and cut-and-paste consistently > mangles data. In addition, nobody can do meaningful analysis without > complete unadulterated messages that are attached, not cut-and-pasted.
Not exactly... but sorry. It was a cut and past from the summary buffer of emacs news reader gnus. (not a screen shot) > > That's why Steve's guess was not correct. Here are two complete messages as I see them here. Separated by a line of ===== X-From-Line: [EMAIL PROTECTED] Mon Oct 14 17:10:06 2002 Return-Path: <[EMAIL PROTECTED]> Received: from localhost (localhost [127.0.0.1]) by reader.local.lan (8.12.3/8.12.3) with ESMTP id g9F0A4tH015200 for <reader@localhost>; Mon, 14 Oct 2002 17:10:05 -0700 Received: from pop.newsguy.com [216.148.53.72] by localhost with POP3 (fetchmail-5.9.0) for reader@localhost (single-drop); Mon, 14 Oct 2002 17:10:05 -0700 (PDT) Received: from minsu (h209-139-252-215.gtconnect.net [209.139.252.215]) by newsguy.com (8.9.1a/8.9.1) with SMTP id RAA16335 for <[EMAIL PROTECTED]>; Mon, 14 Oct 2002 17:05:54 -0700 (PDT) X-Gnus-Mail-Source: directory:/home/reader/spool/ Message-Id: <[EMAIL PROTECTED]> From: "@L9Z;g"<[EMAIL PROTECTED]> Subject: ':N:N0! GT22 :80m Aq1b4B 193; CVCJ <:@N;g@LF.' Date: Tue, 15 Oct 2002 08:04:48 +0900 Mime-Version: 1.0 Content-Type: text/html; charset="euc-kr" X-UIDL: 84ce7bf98d9727b6579ddc93576933fe X-Spam-Status: No, hits=0.4 required=5.0 tests=HTML_50_70,MSG_ID_ADDED_BY_MTA_3,NO_REAL_NAME, SPAM_PHRASE_00_01 version=2.50-cvs X-Spam-Level: X-Spama-Scores: D:MSG_ID_ADDED_BY_MTA_3:1.107 D:NO_REAL_NAME:0.500 T:1.607 <HTML> <HEAD> <TITLE>BUBUSITE.COM</TITLE> <meta http-equiv="Content-Type" content="text/html; charset=ks_c_5601-1987"> <link rel="stylesheet" href="http://www.bubusite.com/common.css" type="text/css"> </HEAD> <BODY bgcolor="#FFFFFF" text="#800000" link="#FF0000" vlink="#FF0000" topmargin="0" leftmargin="0"> <BR> <table border=0 width=712 cellspacing=0 cellpadding=1 align=center> <tr> <td bgcolor="#000000"> <table border=0 width=710 cellspacing=0 cellpadding=0 bgcolor="#FFFFFF"> <tr height=59> <td width=183><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img01.gif' border=0 width=183></a></td> <td width=172><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img02.gif' border=0 width=172></a></td> <td width=189><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img03.gif' border=0 width=189></a></td> <td width=166><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img04.gif' border=0 width=166></a></td> </tr> <tr height=173> <td width=183><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img05.gif' border=0 width=183></a></td> <td width=172><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img06.gif' border=0 width=172></a></td> <td width=189><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img07.gif' border=0 width=189></a></td> <td width=166><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img08.gif' border=0 width=166></a></td> </tr> <tr height=190> <td width=183><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img09.gif' border=0 width=183></a></td> <td width=172><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img10.gif' border=0 width=172></a></td> <td width=189><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img11.gif' border=0 width=189></a></td> <td width=166><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img12.gif' border=0 width=166></a></td> </tr> <tr height=55> <td width=183><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img13.gif' border=0 width=183></a></td> <td width=172><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img14.gif' border=0 width=172></a></td> <td width=189><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img15.gif' border=0 width=189></a></td> <td width=166><a href="http://www.bubusite.com" target='new'><img src='http://www.bubusite.com/mail/img/img16.gif' border=0 width=166></a></td> </tr> <tr> <td width=100% colspan=4 align=center>:; 8^@O@: [<:@N1$0m]7N G%=CGQ H+:8 8^@O@T4O4Y. :; 8^@O@; ?xD! >J@8=C8i ?)1b8& 4-7/ <v=E0E:NGX AV=C1b 9Y6x4O4Y.</td> </tr> </table> </td> </tr> </table> </BODY> </HTML> ================================================================== X-From-Line: [EMAIL PROTECTED] Mon Oct 14 19:15:04 2002 Return-Path: <[EMAIL PROTECTED]> Received: from localhost (localhost [127.0.0.1]) by reader.local.lan (8.12.3/8.12.3) with ESMTP id g9F2F4tG017794 for <reader@localhost>; Mon, 14 Oct 2002 19:15:04 -0700 Received: from pop.newsguy.com [216.148.53.72] by localhost with POP3 (fetchmail-5.9.0) for reader@localhost (single-drop); Mon, 14 Oct 2002 19:15:04 -0700 (PDT) Received: from test1.com (s210-181-124-41.thrunet.ne.kr [210.181.124.41]) by newsguy.com (8.9.1a/8.9.1) with SMTP id TAA45760 for <[EMAIL PROTECTED]>; Mon, 14 Oct 2002 19:12:55 -0700 (PDT) X-Gnus-Mail-Source: directory:/home/reader/spool/ Message-Id: <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] From: "@LAn8>"<[EMAIL PROTECTED]> Subject: [1$0m]<v@T@/>F?kG0, @O:;<v@T18A& AA@:>F0!?J 180fGO<<?d! Date: Tue, 15 Oct 2002 11:01:29 +0900 Mime-Version: 1.0 Content-Type: text/html; charset="euc-kr" X-UIDL: fb457ad91c1d24062f1278a165f0d879 X-Spam-Status: No, hits=2.5 required=5.0 tests=FROM_ENDS_IN_NUMS,HTML_50_70,HTML_FONT_COLOR_BLUE, HTML_FONT_COLOR_UNSAFE,HTML_FONT_FACE_BAD, HTML_FONT_FACE_ODD,HTML_TAG_MIXED_CASE,MAILTO_LINK, MSG_ID_ADDED_BY_MTA_3,NO_REAL_NAME,PLING_QUERY, SPAM_PHRASE_00_01 version=2.50-cvs X-Spam-Level: ** X-Spama-Scores: D:FROM_ENDS_IN_NUMS:0.382 T:0.382 <STYLE TYPE="text/css"> <!-- td { font-family:58?r; color:black; font-size: 12px ; line-height: 12pt} --> </STYLE> <table width=500 cellpadding=5 border=0 cellpadding=0 cellspacing=0 ><tr><td bgcolor=555555> <table width=500 cellpadding=5 border=0 cellpadding=0 cellspacing=0 ><tr><td bgcolor=00AEEF> <table border=0 width=500 cellpadding=0 cellspacing=0 ><tr><td valign=top> <img src=http://ipslinux2.ips2000.co.kr/~coordiweb_com/vivibebe/freeshop/images/logo.gif><img src=http://ipslinux2.ips2000.co.kr/~coordiweb_com/vivibebe/freeshop/images/top1.gif> </td><td align=right valign=bottom><font color=white><b>ismam News Letter<br>www.ismam.com</td></tr></table> </td></tr> <tr><td bgcolor=white> <ul><br><br> >H3gGO<<?d?<br> 8U@z ;g@| Gc6t55 >x@L 8^@O@; :83;5e7A<- AK<[GU4O4Y. <br> <<7C5G0m >FAV @L;[ ?\19 >F0!:j7#5e ?J 0!0T >H3; @T4O4Y.<br> 0|=I>x@8=E :P@: 9Y7N ;hA&GXAV<<?d. <br> 8E90@L @V>n<- :N7*:N7* 885i>n<- H+:8GO0m @V=@4O4Y.<br> @NEM3]?!<- FG8EGO4O1n 0|=I@V@8=E:P@: Av1] 9Y7N 5i7AAV<<?d. <br><br> <a href=http://www.ismam.com target=blink>http://www.ismam.com</a> <br><br> @LAn8>@G ?J5i@: 193;A&A69f=D@N OEM@G <v@T@/>F:90z 9L19 5n GX?\?!<-<br> Aw<v@T5G4B ?J5i A_ EeEeF"0m,<br> ?9;Z0m, >KBy ?J5i7N88 >v<1GX<- ?C8.0m @V4d4O4Y. <br> 6GGQ @O:;<v@T18A& >F0!?J55 Ck1^GO0m @V=@4O4Y.<br> >V1b >F:|, >v86:P5i@L AwA" :8=C0m =N0T ;g<E55 AA18?d,<br> 9i@O@L3* >V1b 59 <190?k@87N55 AA>F?d. 0(;gGU4O4Y.<br><br> 8Z@o@L <v@T>F0!?kG00!0T @LAn8><br> <a href=http://www.ismam.com target=blink>http://www.ismam.com</a><br><br> </ul> <center> <hr size=1 width=500> <font color=darkblue><a href=http://www.ismam.com>8Z@o@L <v@T@/>F?kG0 0!0T @LAn8></a></font> <br><br><br> </td></tr> </table> </td></tr> </table> <HR color=#8bb5e2> <DIV align=center> <FONT face=1<82 size=2 color=#8bb5e2>:; 8^@O@: A$:8Ek=E:N 1G0m ;gGW?! @G0E A&8q?! [1$0m]6s G%=C5H 1$0m 8^@O@T4O4Y.</FONT><BR> <A style="PADDING-RIGHT: 3px; PADDING-LEFT: 3px; FONT-SIZE: 12px; PADDING-BOTTOM: 3px; COLOR: #ffff00; PADDING-TOP: 3px; FONT-FAMILY: 1<82; BACKGROUND-COLOR: #8bb5e2; TEXT-DECORATION: none" href="mailto:[EMAIL PROTECTED]"><v=E0E:N</A> <FONT color=#8bb5e2 size=2 color=#8bb5e2>9vF0@; E,8/GO=C8i <v=E0E:NC38.0! @L7g>n A}4O4Y.</FONT> </DIV> <HR color=#8bb5e2> ------------------------------------------------------- This sf.net email is sponsored by: See the NEW Palm Tungsten T handheld. Power & Color in a compact size! http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk