Daniel Quinlan <[EMAIL PROTECTED]> writes:

> "Steve Thomas" <[EMAIL PROTECTED]> writes:
>
>>> It looks like you're looking for SUBJ_FULL_OF_8BITS. See if these messages
>>> are triggering that rule. I /dev/null anything that hits on that one.
>  
> Harry Putnam <[EMAIL PROTECTED]> writes:
>
>> None of those posted show having hit that rule.
>
> I can't tell if it's 7-bit random garbage, 8-bit random garbage, or
> 8-bit random garbage stuff being converted to 7-bit garbage.
>
> Why?  Because you have cut-and-pasted one or two headers (and not even
> directly -- it's a screen shot!) and cut-and-paste consistently
> mangles data.  In addition, nobody can do meaningful analysis without
> complete unadulterated messages that are attached, not cut-and-pasted.

Not exactly... but sorry.  It was a cut and past from the summary
buffer of emacs news reader gnus. (not a screen shot)
>
> That's why Steve's guess was not correct.

Here are two complete messages as I see them here.  Separated by a
line of =====

X-From-Line: [EMAIL PROTECTED]  Mon Oct 14 17:10:06 2002
Return-Path: <[EMAIL PROTECTED]>
Received: from localhost (localhost [127.0.0.1])
        by reader.local.lan (8.12.3/8.12.3) with ESMTP id g9F0A4tH015200
        for <reader@localhost>; Mon, 14 Oct 2002 17:10:05 -0700
Received: from pop.newsguy.com [216.148.53.72]
        by localhost with POP3 (fetchmail-5.9.0)
        for reader@localhost (single-drop); Mon, 14 Oct 2002 17:10:05 -0700 (PDT)
Received: from minsu (h209-139-252-215.gtconnect.net [209.139.252.215])
        by newsguy.com (8.9.1a/8.9.1) with SMTP id RAA16335
        for <[EMAIL PROTECTED]>; Mon, 14 Oct 2002 17:05:54 -0700 (PDT)
X-Gnus-Mail-Source: directory:/home/reader/spool/
Message-Id: <[EMAIL PROTECTED]>
From: "@L9Z;g"<[EMAIL PROTECTED]>
Subject: ':N:N0! GT22 :80m Aq1b4B 193; CVCJ <:@N;g@LF.'
Date: Tue, 15 Oct 2002 08:04:48 +0900
Mime-Version: 1.0
Content-Type: text/html; charset="euc-kr"
X-UIDL: 84ce7bf98d9727b6579ddc93576933fe
X-Spam-Status: No, hits=0.4 required=5.0
        tests=HTML_50_70,MSG_ID_ADDED_BY_MTA_3,NO_REAL_NAME,
              SPAM_PHRASE_00_01
        version=2.50-cvs
X-Spam-Level: 
X-Spama-Scores: D:MSG_ID_ADDED_BY_MTA_3:1.107 D:NO_REAL_NAME:0.500 T:1.607

<HTML>
<HEAD>
<TITLE>BUBUSITE.COM</TITLE>
<meta http-equiv="Content-Type" content="text/html; charset=ks_c_5601-1987">
<link rel="stylesheet" href="http://www.bubusite.com/common.css"; type="text/css">
</HEAD>
<BODY bgcolor="#FFFFFF" text="#800000" link="#FF0000" vlink="#FF0000" topmargin="0" 
leftmargin="0">
<BR>
<table border=0 width=712 cellspacing=0 cellpadding=1 align=center>
<tr>
<td bgcolor="#000000">
<table border=0 width=710 cellspacing=0 cellpadding=0 bgcolor="#FFFFFF">
<tr height=59>
<td width=183><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img01.gif' border=0 width=183></a></td>
<td width=172><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img02.gif' border=0 width=172></a></td>
<td width=189><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img03.gif' border=0 width=189></a></td>
<td width=166><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img04.gif' border=0 width=166></a></td>
</tr>
<tr height=173>
<td width=183><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img05.gif' border=0 width=183></a></td>
<td width=172><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img06.gif' border=0 width=172></a></td>
<td width=189><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img07.gif' border=0 width=189></a></td>
<td width=166><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img08.gif' border=0 width=166></a></td>
</tr>
<tr height=190>
<td width=183><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img09.gif' border=0 width=183></a></td>
<td width=172><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img10.gif' border=0 width=172></a></td>
<td width=189><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img11.gif' border=0 width=189></a></td>
<td width=166><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img12.gif' border=0 width=166></a></td>
</tr>
<tr height=55>
<td width=183><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img13.gif' border=0 width=183></a></td>
<td width=172><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img14.gif' border=0 width=172></a></td>
<td width=189><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img15.gif' border=0 width=189></a></td>
<td width=166><a href="http://www.bubusite.com"; target='new'><img 
src='http://www.bubusite.com/mail/img/img16.gif' border=0 width=166></a></td>
</tr>
<tr>
<td width=100% colspan=4 align=center>:; 8^@O@: [<:@N1$0m]7N G%=CGQ H+:8 8^@O@T4O4Y. 
:; 8^@O@; ?xD! >J@8=C8i ?)1b8& 4-7/ <v=E0E:NGX AV=C1b 9Y6x4O4Y.</td>
</tr>
</table>
</td>
</tr>
</table>
</BODY>
</HTML>

==================================================================

X-From-Line: [EMAIL PROTECTED]  Mon Oct 14 19:15:04 2002
Return-Path: <[EMAIL PROTECTED]>
Received: from localhost (localhost [127.0.0.1])
        by reader.local.lan (8.12.3/8.12.3) with ESMTP id g9F2F4tG017794
        for <reader@localhost>; Mon, 14 Oct 2002 19:15:04 -0700
Received: from pop.newsguy.com [216.148.53.72]
        by localhost with POP3 (fetchmail-5.9.0)
        for reader@localhost (single-drop); Mon, 14 Oct 2002 19:15:04 -0700 (PDT)
Received: from test1.com (s210-181-124-41.thrunet.ne.kr [210.181.124.41])
        by newsguy.com (8.9.1a/8.9.1) with SMTP id TAA45760
        for <[EMAIL PROTECTED]>; Mon, 14 Oct 2002 19:12:55 -0700 (PDT)
X-Gnus-Mail-Source: directory:/home/reader/spool/
Message-Id: <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
From: "@LAn8>"<[EMAIL PROTECTED]>
Subject: [1$0m]<v@T@/>F?kG0, @O:;<v@T18A& AA@:>F0!?J 180fGO<<?d!
Date: Tue, 15 Oct 2002 11:01:29 +0900
Mime-Version: 1.0
Content-Type: text/html; charset="euc-kr"
X-UIDL: fb457ad91c1d24062f1278a165f0d879
X-Spam-Status: No, hits=2.5 required=5.0
        tests=FROM_ENDS_IN_NUMS,HTML_50_70,HTML_FONT_COLOR_BLUE,
              HTML_FONT_COLOR_UNSAFE,HTML_FONT_FACE_BAD,
              HTML_FONT_FACE_ODD,HTML_TAG_MIXED_CASE,MAILTO_LINK,
              MSG_ID_ADDED_BY_MTA_3,NO_REAL_NAME,PLING_QUERY,
              SPAM_PHRASE_00_01
        version=2.50-cvs
X-Spam-Level: **
X-Spama-Scores: D:FROM_ENDS_IN_NUMS:0.382 T:0.382

<STYLE TYPE="text/css">
<!--
td         { font-family:58?r; color:black; font-size: 12px ; line-height: 12pt}
-->
</STYLE>
<table width=500 cellpadding=5 border=0 cellpadding=0 cellspacing=0 ><tr><td 
bgcolor=555555>
<table width=500 cellpadding=5 border=0 cellpadding=0 cellspacing=0 ><tr><td 
bgcolor=00AEEF>
<table border=0 width=500 cellpadding=0 cellspacing=0 ><tr><td valign=top>
<img 
src=http://ipslinux2.ips2000.co.kr/~coordiweb_com/vivibebe/freeshop/images/logo.gif><img
 src=http://ipslinux2.ips2000.co.kr/~coordiweb_com/vivibebe/freeshop/images/top1.gif>
</td><td align=right valign=bottom><font color=white><b>ismam News 
Letter<br>www.ismam.com</td></tr></table>
</td></tr>
<tr><td bgcolor=white>
<ul><br><br>
>H3gGO<<?d?<br>
8U@z ;g@| Gc6t55 >x@L 8^@O@; :83;5e7A<- AK<[GU4O4Y. <br>
<<7C5G0m >FAV @L;[ ?\19 >F0!:j7#5e ?J 0!0T >H3; @T4O4Y.<br>
0|=I>x@8=E :P@: 9Y7N ;hA&GXAV<<?d. <br>
8E90@L @V>n<- :N7*:N7* 885i>n<- H+:8GO0m @V=@4O4Y.<br>
@NEM3]?!<- FG8EGO4O1n 0|=I@V@8=E:P@: Av1] 9Y7N 5i7AAV<<?d. <br><br>
<a href=http://www.ismam.com target=blink>http://www.ismam.com</a> <br><br>
@LAn8>@G ?J5i@: 193;A&A69f=D@N OEM@G <v@T@/>F:90z 9L19 5n GX?\?!<-<br>
Aw<v@T5G4B ?J5i A_ EeEeF"0m,<br>
?9;Z0m, >KBy ?J5i7N88 >v<1GX<- ?C8.0m @V4d4O4Y. <br>
6GGQ @O:;<v@T18A& >F0!?J55 Ck1^GO0m @V=@4O4Y.<br>
>V1b >F:|, >v86:P5i@L AwA" :8=C0m =N0T ;g<E55 AA18?d,<br>
9i@O@L3* >V1b 59 <190?k@87N55 AA>F?d. 0(;gGU4O4Y.<br><br>
8Z@o@L <v@T>F0!?kG00!0T @LAn8><br>
<a href=http://www.ismam.com target=blink>http://www.ismam.com</a><br><br>
</ul>
<center>
<hr size=1 width=500>
<font color=darkblue><a href=http://www.ismam.com>8Z@o@L <v@T@/>F?kG0 0!0T 
@LAn8></a></font>
<br><br><br>
</td></tr>
</table>
</td></tr>
</table>
<HR color=#8bb5e2>
<DIV align=center>
<FONT face=1<82 size=2 color=#8bb5e2>:; 8^@O@: A$:8Ek=E:N 1G0m ;gGW?! @G0E
A&8q?! [1$0m]6s G%=C5H 1$0m 8^@O@T4O4Y.</FONT><BR>
<A style="PADDING-RIGHT: 3px; PADDING-LEFT: 3px; FONT-SIZE: 12px;
PADDING-BOTTOM: 3px; COLOR: #ffff00; PADDING-TOP: 3px; FONT-FAMILY: 1<82;
BACKGROUND-COLOR: #8bb5e2; TEXT-DECORATION: none"
href="mailto:[EMAIL PROTECTED]";><v=E0E:N</A>
<FONT color=#8bb5e2  size=2 color=#8bb5e2>9vF0@; E,8/GO=C8i <v=E0E:NC38.0! @L7g>n 
A}4O4Y.</FONT>
</DIV>
<HR color=#8bb5e2>






-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to