Hello Robert,

Wednesday, July 2, 2003, 6:16:03 PM, you wrote:

AM>> This spam had a 0 score, SA 2.54... wondering how it got
AM>> through - it is full of lots of words about weight loss and
AM>> all caps words like GUARANTEED, FREE - no HTML though, just
AM>> plain text:

RM> It scored 6.2 here,
>> X-Spam-Status: No, hits=6.2 required=9.0
>>         tests=BAYES_70,DIET,HTML_10_20,HTML_MESSAGE,HTML_TITLE_EMPTY,
>>               L_u_PMTED_CLK
>>         version=2.55
>> X-Spam-Level: ******
>> X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
RM> with that last test being my own local test.

The email that I posted was text only - it came to me in
that form, I posted full headers including:

Content-Type: text/plain

So there shouldn't be any HTML scoring at all - if there
were any HTML tags in the sample you used my guess
would be that it was an artifact of your own email program
or something happening on the listserver
(my email program does not send HTML encoded messages).

The Bayes test would obviously be system specific, and you
said that the last test is your own - which leaves "DIET" -

I think there might have been a change to that test between
2.54 (my version) and 2.55. - for what it's worth the 2.54
test looks for:

/\b(?:(?:without|no)(?:exercis(?:e|ing)|dieting)|weight.?loss|(?:extra|lose|lost|losing).{0,10}(?:pounds|weight|inches|lbs)|burn.{1,10}fat)\b/i

though I don't know if it's worth spending the time parsing
it out with this particular email. It looks like the
promoters of the Adkins diet managed to skirt by the test by
avoiding specific language. (My guess is that even if we
don't spend the time trying to figure out these tests, the
spam writers do).

-Abigail



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to