HI List
Just to add the results after uploading the spam to the server again.
$spamassassin -t -D < US\ Students\ email\ list.msg
<snip>
0-------------------- Start SpamAssassin results ----------------------
This mail is probably spam. The original message has been altered
so you can recognise or block similar unwanted mail in future.
See http://spamassassin.org/tag/ for more details.
Content analysis details: (16.7 hits, 4.4 required)
0.7 RM_tl_ToNone No To header found in email
0.3 RM_hm_EmtyMsgid Message ID is empty, or just spaces -
probable spamsign
2.5 HEAD_LONG Message headers are very long
-3.3 ALL_TRUSTED Did not pass through any untrusted hosts
2.1 HEAD_ILLEGAL_CHARS Header contains too many raw illegal characters
0.1 MISSING_HEADERS Missing To: header
0.6 J_CHICKENPOX_23 BODY: 2alpha-pock-3alpha
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5000]
1.0 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: nsshost.com]
0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL
blocklist
[URIs: nsshost.com bbehost.com]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL
blocklist
[URIs: nsshost.com bbehost.com]
3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL
blocklist
[URIs: nsshost.com bbehost.com]
4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL
blocklist
[URIs: nsshost.com bbehost.com]
1.2 MISSING_SUBJECT Missing Subject: header
0.0 UPPERCASE_25_50 message body is 25-50% uppercase
0.3 FVGT_m_MULTI_ODD3 Contains multiple odd letter combinations
1.1 FVGT_m_MULTI_ODD2 Contains multiple odd letter combinations
0.4 FVGT_m_MULTI_ODD5 Contains multiple odd letter combinations
0.3 FVGT_m_MULTI_ODD4 Contains multiple odd letter combinations
-------------------- End of SpamAssassin results ---------------------
<snip>
So why then did the original receive only 3.1?
Thanks
Tom
_____________________________________________
From: Thomas Kinghorn
Sent: 06 October 2004 07:07
To: [EMAIL PROTECTED]
Subject
<mailto:[EMAIL PROTECTED]> : more spam since
upgrade
Hi List.
I have recently upgraded toExim-4.42, Spamassassin 3.0 &
sa-exim-4.1
The amount of spam slipping through since then has increased
dramatically.
The scores seem a bit on the low side since upgrading.
Below is the message ID and I have attached the mail from
which it originates.
Any ideas would be appreciated.
Regards
Tom
Message-ID: <[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]> >
From: Tom Theroux <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
>
To: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
Date: Tue, 05 Oct 2004 14:26:30 +0000
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-SA-Exim-Connect-IP: 196.4.87.24
X-SA-Exim-Mail-From: [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>
Subject: US Students email list
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0000_AC8AFB96.13499A18"
X-Spam-Checker-Version: SpamAssassin 3.0.0 (2004-09-13) on
jp-mx-1
X-Spam-Level: ***
X-Spam-Status: No, score=3.1 required=4.4
tests=BAYES_50,FORGED_OUTLOOK_TAGS,
HTML_20_30,HTML_MESSAGE,HTML_TAG_EXIST_TBODY,INVALID_TZ_GMT,URIBL_SBL,
URIBL_WS_SURBL autolearn=no version=3.0.0
X-SA-Exim-Version: 4.1 (built Tue, 05 Oct 2004 09:43:32
+0200)
<<US Students email list>>
--- Begin Message ---
Are you targeting the student sector? Do you want students to buy your
product or visit your website?
Our company has carefully collected an email database, which allows to
advertise your product or service to the audience of 1.7 million US college
& university students! This is the most comprehensive students email
database available on the Internet.
All addresses on the database belong to students (18-24 years old), are
verified and as a proof of their origin end with '.edu', which stands for
educational institutions.
The database will be delivered to you in a ZIP archive of a 34MB TXT file.
All addresses were collected in September, 2004.
The price we are asking is $370. To place an order please proceed to:
Mirror 1: http://www.nsshost.com/edu.php <http://www.nsshost.com/edu.php>
Mirror 2: http://www.bbehost.com/edu.php <http://www.bbehost.com/edu.php>
Sincerely,
Tom Theroux
_____________________________________________________
To change your mail preferences, go here: http://www.nsshost.com/out.htm
<http://www.nsshost.com/out.htm>
_____________________________________________________
--- End Message ---
