interesting effect with this spam... I'm set to report_safe 1. However,
the message cam to me with the headers really screwed up. The result was
that my server rules for filtering on X-Spam-Status didn't work. 

Should SA make better attempt to not reproduce corrupt headers/etc.?

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  [EMAIL PROTECTED]
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216
--- Begin Message ---
To: \braze.txt, \appliance2.txt, \bengal.txt, \appliance1.txt, \cable.tv.txt, 
\[EMAIL PROTECTED], ltd.txt, \[EMAIL PROTECTED], LTD1.txt, \COMMERICAL.txt, \COMMERICAL1.txt, 
\commerical2.txt, \commerical3.txt, \COMPUTER.txt, \COMPUTER1.txt, \COMPUTER2.txt, 
\computer3.txt, \COMPUTER4.txt, \computer5.txt, \COMPUTER6.txt, \disk.txt, \disk1.txt, 
\EXPORT.txt, \export1.txt, \EXPORT3.txt, \EXPORT4.txt, \EXPORT5.txt, \EXPORT6.txt, 
\EXPORT7.txt, \GAME.4.txt, \GAME.5.txt, \game.txt, \game1.txt, \game2.txt, \GAME3.txt, 
\hongkong.txt, \import.txt, \IMPORT1.txt, \IMPORT10.txt, \IMPORT11.txt, \IMPORT12.txt, 
\IMPORT13.txt, \IMPORT14.txt, \IMPORT16.txt, \IMPORT17.txt, \IMPORT18.txt, 
\IMPORT19.txt, \IMPORT20.txt, \IMPORT21.txt, \IMPORT4.txt, \IMPORT5.txt, \IMPORT6.txt, 
\IMPORT7.txt, \IMPORT8.txt, \IMPORT9.txt, \IMPOTE2.txt, \india.txt, \LCD.txt, 
\lcd2.txt, \lcd3.txt, \lcd4.txt, \lcd9.txt, \lebanon.txt, \monitor.txt, \news.txt, 
\SEMICOM.txt, \semicom1.txt, \semicom2.txt, \semicom3.txt, \semicom4.txt, 
\technology.txt, \TECHNOLOGY2.txt, \technology3.txt, \TRADING.txt, \TRADING1.txt, 
\trading2.txt, \tv.game.1.txt, \tv.game.txt, \tv.game2.txt, \TV.txt, \TV2.txt, 
\tv3.txt, \vcd.txt, \www.txt, \新建.文本文档.txt (2), \新建.文本文档.txt
Subject: *****SPAM***** 
Date: Sat, 4 Jan 2003 16:09:07 -0600
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Flag: YES
X-Spam-Status: Yes, hits=14.3 required=5.0
        tests=DCC_CHECK,DEAR_SOMETHING,FROM_ENDS_IN_NUMS,HEADER_8BITS,
              LINES_OF_YELLING,MISSING_MIMEOLE,MISSING_OUTLOOK_NAME,
              MSG_ID_ADDED_BY_MTA_3,NO_REAL_NAME,RATWARE_HASH_2,
              RATWARE_HASH_2_V2,UPPERCASE_50_75
        version=2.50-cvs
X-Spam-Level: **************
X-Spam-Checker-Version: SpamAssassin 2.50-cvs 1.157-2003-01-02-exp
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_3E175B8B.2FD31CBE"
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 04 Jan 2003 22:09:15.0494 (UTC) FILETIME=[EB631860:01C2B43D]

This is a multi-part message in MIME format.

------------=_3E175B8B.2FD31CBE
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

This mail is probably spam.  The original message has been attached
along with this report, so you can recognize or block similar unwanted
mail in future.  See http://spamassassin.org/tag/ for more details.

Content preview:  CHYA DANN ENTERPRISE CO.,LTD TEL:886-2-29170979
  FAX:886-2-29137636 E-MAIL: [EMAIL PROTECTED] ATTN: DAVID DEAR
  SIR: THE SECOND HAND IBM 9103 HAND HELD AFTER TESTING CAN WORK W-98 AND
  W-ME THE 9103 SPEC AS BELOW: 1. 10.4" TFT TOUCH PANEL 2. 32MB MEMORY 3.
  CPU: USE AMD 75/133MHZ......... 4. 1MB VGA OUTPUT 5. 2 PCMICA SLOT 6. 1
  EXTERNAL FDD I/O PORT 7. HDD: 1080MB/IBM 8. PS-2 KEYBOARD PORT/PS-2
  MOUSE PORT 9. PRINT PORT 1 10. RS232 PORT 1 11. 56K MODEM/ 12. 10 BASE
  ENTHERNER CARD 13. 256 COLOR TFT(640x480) 14. all have been tested 15.
  warrenty: CAN CALL IBM SERVICE CENTER [...] 

Content analysis details:   (14.30 points, 5 required)
NO_REAL_NAME       (1.3 points)  From: does not include a real name
HEADER_8BITS       (2.5 points)  Headers include 3 consecutive 8-bit characters
RATWARE_HASH_2_V2  (1.0 points)  Bulk email software fingerprint (hash 2 v2) found in 
headers
FROM_ENDS_IN_NUMS  (0.9 points)  From: ends in numbers
RATWARE_HASH_2     (1.3 points)  Bulk email software fingerprint (hash 2) found in 
headers
DEAR_SOMETHING     (1.7 points)  BODY: Contains 'Dear (something)'
LINES_OF_YELLING   (0.2 points)  BODY: A WHOLE LINE OF YELLING DETECTED
DCC_CHECK          (2.7 points)  Listed in DCC, see http://rhyolite.com/anti-spam/dcc/
MSG_ID_ADDED_BY_MTA_3 (0.9 points)  'Message-Id' was added by a relay (3)
MISSING_MIMEOLE    (0.5 points)  Message has X-MSMail-Priority, but no X-MimeOLE
UPPERCASE_50_75    (0.2 points)  message body is 50-75% uppercase
MISSING_OUTLOOK_NAME (1.1 points)  Message looks like Outlook, but isn't



------------=_3E175B8B.2FD31CBE
Content-Type: message/rfc822
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Received: (qmail 5790 invoked from network); 4 Jan 2003 22:09:12 -0000
Received: from unknown (HELO smtp.umr.edu) (unknown)
  by unknown with SMTP; 4 Jan 2003 22:09:12 -0000
Received: from chyadann-6qu6d4 ([218.18.87.14]) via SMTP by mrelay1.cc.umr.edu 
(8.12.1/) id h04M97LZ021260; Sat, 4 Jan 2003 16:09:10 -0600
Date: Sat, 4 Jan 2003 16:09:07 -0600
Received: from iris
        by iris.seed.net.tw with SMTP id 3ohA9cDiuNX825Rd;
        Sun, 05 Jan 2003 06:09:34 +0800
Message-ID: <[EMAIL PROTECTED]>
From: [EMAIL PROTECTED]
To: \braze.txt, \appliance2.txt, \bengal.txt, \appliance1.txt, \cable.tv.txt,
   \[EMAIL PROTECTED], ltd.txt, \[EMAIL PROTECTED], LTD1.txt, \COMMERICAL.txt,
   \COMMERICAL1.txt, \commerical2.txt, \commerical3.txt, \COMPUTER.txt,
   \COMPUTER1.txt, \COMPUTER2.txt, \computer3.txt, \COMPUTER4.txt,
   \computer5.txt, \COMPUTER6.txt, \disk.txt, \disk1.txt, \EXPORT.txt,
   \export1.txt, \EXPORT3.txt, \EXPORT4.txt, \EXPORT5.txt, \EXPORT6.txt,
   \EXPORT7.txt, \GAME.4.txt, \GAME.5.txt, \game.txt, \game1.txt, \game2.txt,
   \GAME3.txt, \hongkong.txt, \import.txt, \IMPORT1.txt, \IMPORT10.txt,
   \IMPORT11.txt, \IMPORT12.txt, \IMPORT13.txt, \IMPORT14.txt, \IMPORT16.txt,
   \IMPORT17.txt, \IMPORT18.txt, \IMPORT19.txt, \IMPORT20.txt, \IMPORT21.txt,
   \IMPORT4.txt, \IMPORT5.txt, \IMPORT6.txt, \IMPORT7.txt, \IMPORT8.txt,
   \IMPORT9.txt, \IMPOTE2.txt, \india.txt, \LCD.txt, \lcd2.txt, \lcd3.txt,
   \lcd4.txt, \lcd9.txt, \lebanon.txt, \monitor.txt, \news.txt, \SEMICOM.txt,
   \semicom1.txt, \semicom2.txt, \semicom3.txt, \semicom4.txt, \technology.txt,
   \TECHNOLOGY2.txt, \technology3.txt, \TRADING.txt, \TRADING1.txt,
   \trading2.txt, \tv.game.1.txt, \tv.game.txt, \tv.game2.txt, \TV.txt,
   \TV2.txt, \tv3.txt, \vcd.txt, \www.txt, \新建.文本文档.txt (2),
   \新建.文本文档.txt
Subject: 
X-Mailer: 0v4ff6HYda8CaV1rhvFo5vHc
Content-Type: text/plain;
Content-Transfer-Encoding: Quoted-Printable
X-Priority: 3
X-MSMail-Priority: Normal

CHYA DANN ENTERPRISE CO.,LTD
 TEL:886-2-29170979  FAX:886-2-29137636
 E-MAIL: [EMAIL PROTECTED]
 ATTN: DAVID
 
 
DEAR SIR:
                  THE SECOND HAND IBM 9103 HAND HELD
                  AFTER TESTING CAN WORK W-98 AND W-ME
                  THE 9103 SPEC AS BELOW:
                          1. 10.4" TFT TOUCH PANEL
                          2. 32MB MEMORY
                          3. CPU: USE AMD 75/133MHZ.........
                          4. 1MB VGA OUTPUT
                          5. 2 PCMICA SLOT
                          6. 1 EXTERNAL FDD I/O PORT
                          7. HDD: 1080MB/IBM
                          8. PS-2 KEYBOARD PORT/PS-2 MOUSE PORT
                          9. PRINT PORT 1
                         10. RS232 PORT 1
                         11. 56K MODEM/
                         12. 10 BASE ENTHERNER CARD
                         13. 256 COLOR TFT(640x480)
                         14. all have been tested
                         15. warrenty: CAN CALL IBM SERVICE CENTER
 
   I CAN OFFER YOU WITH WIN CE SOFTWARE  ONLY USD200.00/PCS.



This mail is transmitted by UN-registered RaidenMAILD 
http://playstation2.idv.tw/raidenmaild/



------------=_3E175B8B.2FD31CBE--
--- End Message ---

Reply via email to