Since getting spamassassin up and running, I have noticed some of the messages I receive will contain the spam information in the message body rather than the header (see example bellow). They still get the X-Spam-* flags, but the subject remains the same. Can anyone explain to me what is happening with these messages? Thanks!
Greg
-----------------------------------------------------------------------------------------------------------------------------------------
Example:
Micro Racers are the smallest radio controlled cars in the world. It's less than 2.5" in size and is the "Can't find it anywhere" GIFT OF 2002!
Subject: *****SPAM*****
X-Spam-Status: Yes, hits=13.1 required=5.0
tests=FROM_MISSING,DATE_MISSING,SUBJ_MISSING,INVALID_DATE,
EXCUSE_1,CLICK_BELOW,MISSING_HEADERS
version=2.31
X-Spam-Flag: YES
X-Spam-Level: *************
X-Spam-Checker-Version: SpamAssassin 2.31 (devel $Id: SpamAssassin.pm,v 1.94.2.2 2002/06/20 17:20:29 hughescr Exp $)
SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam. The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM:
SPAM: Content analysis details: (13.1 hits, 5 required)
SPAM: FROM_MISSING (4.3 points) Missing From: header
SPAM: DATE_MISSING (2.0 points) Missing Date: header
SPAM: SUBJ_MISSING (1.4 points) Subject: is empty or missing
SPAM: INVALID_DATE (0.5 points) Invalid Date: header (not RFC 822)
SPAM: EXCUSE_1 (2.3 points) BODY: Gives a lame excuse about why you were sent this SPAM
SPAM: CLICK_BELOW (1.5 points) BODY: Asks you to click below
SPAM: MISSING_HEADERS (1.1 points) Missing To: header
SPAM:
SPAM: -------------------- End of SpamAssassin results ---------------------
The Coolest Toy this Holiday Season AND a Perfect Stocking Stuffer!
Get your kids a Micro Racer Today!
BUY NOW!
http://www.partner2profit.com/redir.cfm?ccode=AC322390&pcode=E6F19AF4
------------------
You are receiving this email because you have opted-in to receive email from publisher: swelldeals. To unsubscribe, click below:
