----- Original Message ----- 
From: "Ron McKeating" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 29, 2003 5:18 PM
Subject: [SAtalk] Advice Please


> Why would an ordinary innocent email user be base 64 encoding their
> ordinary text. And why does it get such a big score. Here is the points
> awarded
> 
> HTML_50_60         (2.1 points)  BODY: Message is 50% to 60% HTML
> HTML_MESSAGE       (1.1 points)  BODY: HTML included in message
> BASE64_ENC_TEXT    (3.6 points)  RAW: Message text disguised using
> base-64 encoding
> MIME_HTML_ONLY     (1.2 points)  Message only has text/html MIME parts
> 
> This really was an innocent user from a local council. What on earth
> could they have set on their mail client to get a score like this?
> 

Outlook express, mail sending format HTML, encode using base64.
Or perhaps if you "use ms word as yor mail editor"

That value for BASE64 seemes a little high should be about 2.3 is that a custom score, 
old version of SA, cvs version of SA ?
But then again there is no reason to send HTML as BASE64 in fact it dosent even have 
to be quoted printable.

The fact that 50% of the mail is html suggests also that the sender used an odd 
program to compose their email (eg ms word)



Stuart Gall  
Systems Administrator
-------------------------------------------------------------------------------------------------------------
Critical Error: REALITY.SYS Corrupted! Reboot universe? (y/n) [y]:




-------------------------------------------------------
This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to