Well it scored better over here :
Sat 2003-08-30 19:26:03: ---------- Sat 2003-08-30 19:30:38: Spam Filter processing e:\mdaemon\localq\dragonrm.msg... Sat 2003-08-30 19:30:38: > Message return-path: Sat 2003-08-30 19:30:38: > Message from: [EMAIL PROTECTED] Sat 2003-08-30 19:30:38: > Message to: [EMAIL PROTECTED] Sat 2003-08-30 19:30:38: > Message subject: dragonrm, .name .inc .tv Sat 2003-08-30 19:30:38: > Message ID: <[EMAIL PROTECTED]> Sat 2003-08-30 19:30:41: Start SpamAssassin results Sat 2003-08-30 19:30:41: 22.20 points, 5 required; Sat 2003-08-30 19:30:41: Message preview: Sat 2003-08-30 19:30:41: dragonrm New registrati0ns, Sat 2003-08-30 19:30:41: Sat 2003-08-30 19:30:41: term renewal of every global Net name extensi0ns for just $15. Most popular: .0rg .info .name Just released: .shop .travel .sp0rt [...] Sat 2003-08-30 19:30:41: Content analysis details: Sat 2003-08-30 19:30:41: RCVD_IP_4NUM (0.3 points) Received probably from Dialup-User (4 numbers) Sat 2003-08-30 19:30:41: RCVD_VERIZON (2.6 points) Received from verizon (DSL) User Sat 2003-08-30 19:30:41: RCVD_SUSP_LOCATION (1.7 points) Received from/via a country that sends more SPAM then legit mail... Sat 2003-08-30 19:30:41: TO_ADDRESS_EQ_REAL (0.8 points) Zieladresse wiederholt die Adresse als Empfängernamen Sat 2003-08-30 19:30:41: X_MAIL_FORMAT_WARNING (0.3 points) Has an X-Mail-Format-Warning header Sat 2003-08-30 19:30:41: DOMAIN_BODY (2.2 points) BODY: Nachrichtentext dreht sich um neue Internet-Adressen Sat 2003-08-30 19:30:41: BAYES_70 (2.4 points) BODY: Bayesian classifier says spam probability is 70 to 75% Sat 2003-08-30 19:30:41: [score: 0.7150] Sat 2003-08-30 19:30:41: PORN_OBFUS_02 (1.8 points) BODY: Porn indication (and obfuscates it) (2) Sat 2003-08-30 19:30:41: RCVD_IN_NJABL (0.1 points) RBL: Transportiert via Rechner in Liste von dnsbl.njabl.org Sat 2003-08-30 19:30:41: [RBL check: found 60.2.219.211.dnsbl.njabl.org.,] Sat 2003-08-30 19:30:41: [type: 127.0.0.9] Sat 2003-08-30 19:30:41: OPM_BLITZED (3.1 points) RBL: opm.blitzed.org Sat 2003-08-30 19:30:41: [RBL check: found 60.2.219.211.opm.blitzed.org.,] Sat 2003-08-30 19:30:41: [type: 127.1.0.4] Sat 2003-08-30 19:30:41: NJABL_PROXY (4.2 points) RBL: DNSBL: sender is an open proxy Sat 2003-08-30 19:30:41: KOREAN_RELAY (2.6 points) RBL: Received via a relay in Korea Sat 2003-08-30 19:30:41: [RBL check: found 60.2.219.211.korea.services.net.] Sat 2003-08-30 19:30:41: RCVD_IN_SORBS (0.1 points) RBL: Transportiert via Rechner in Liste von www.dnsbl.sorbs.net Sat 2003-08-30 19:30:41: [RBL check: found 60.2.219.211.dnsbl.sorbs.net.,] Sat 2003-08-30 19:30:41: [type: 127.0.0.3] Sat 2003-08-30 19:30:41: End SpamAssassin results Sat 2003-08-30 19:30:41: ---------- -- Cheers, Lisa Keiser addr.arpa... > Just had this one come through for domains. Really low score. Should I add a > new rule?? > > Return-Path: <[EMAIL PROTECTED]> > Received: from hotbox.ru ([211.219.2.60]) by mta014.verizon.net > (InterMail vM.5.01.05.33 201-253-122-126-133-20030313) with SMTP > id <[EMAIL PROTECTED]> > for <[EMAIL PROTECTED]>; Fri, 29 Aug 2003 11:23:31 -0500 > Message-ID: <[EMAIL PROTECTED]> > Reply-To: "Fernando Escovedo" <[EMAIL PROTECTED]> > From: "Fernando Escovedo" <[EMAIL PROTECTED]> > To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> > Subject: dragonrm, .name .inc .tv > Date: Fri, 29 Aug 2003 19:25:37 +0400 > MIME-Version: 1.0 > Content-Type: text/plain; > charset="iso-8859-1" > Content-Transfer-Encoding: 7bit > X-Priority: 3 > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook Express 6.00.2462.0000 > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2462.0000 > X-Spam-Status: No, hits=0.6 required=5.0 > tests=TO_ADDRESS_EQ_REAL > version=2.55 > X-Spam-Level: > X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp) > > dragonrm > > New registrati0ns, term renewal of every global Net name extensi0ns for > just $15. > > Most popular: .0rg .info .name > Just released: .shop .travel .sp0rt > > Over 100,000 names registered so far. > > http://www.domainsfornow.com > > > > > > > > > > > > > > N0t interested: > http://www.domainsfornow.com/cgi-bin/off_list.cgi > > > > > > > Enjoy your day! > > > SegMm > CdqqausyJlvibrm > > g4 > > > ------------------------------------------------------- > This sf.net email is sponsored by:ThinkGeek > Welcome to geek heaven. > http://thinkgeek.com/sf ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
