Ok I spoke to our webmaster , what we concluded is that they are using the display none code in the HTML to hide the rest of the "legitimate text" so that SA wont see it as bad words, leaving us to see only the what they want.
Is there are way to have SA scan the messages for display the display none code? If display none is being used then it would be apparent that it is some type of spam? Does anyone see a problem with filtering display none? -----Original Message----- From: Jean-Paul Natola [mailto:[EMAIL PROTECTED] Sent: Friday, July 08, 2005 1:50 PM To: users@spamassassin.apache.org Subject: Scoring As you are all aware I'm in my first few days of deployment , I'm pretty new to this, My inquiry was on the scoring , our presidents inbox received this message And I'm wondering how it only scored 2.7 The odd part is that nothing in the header is what was written in the email From: "Ko Ricker" <[EMAIL PROTECTED]> To: "Deanna Phipps" <[EMAIL PROTECTED]> Subject: My Girl Loves the New Mee Date: Fri, 8 Jul 2005 05:01:52 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0063_01C583A4.10396800" X-Priority: 3 X-MSMail-Priority: Normal X-Unsent: 1 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Spam-Score: 2.7 (++) X-Spam-Report: Spam detection software, running on the system "milter", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Hello, Peter Blood waited a moment, observing him; then he bowed andLord Julian considered him, and considering him his expressionhorror before the jeering ruffian whom he had slain, and otherlong, inactive waiting was straining the nerves of both Lordcomposed of French boucanhunters from Northern Hispaniola, men whohe instantly practised an unusual submission.Let that wait, snapped Mr. Blood almost angrily. You've allMr. Pollexfen - a Whig at heart despite the position ofWhat was a day, after all? The Secretary's office might bePut down the helm, he commanded.ashamed of, considering the provocation I received.flattered and humoured.one eye than do most men with two; and despite his grizzled headCahusac would certainly have adopted that course if only his men hadobbordunidy.he wrote. Although outnumbered by more than two to one in men, [...] Content analysis details: (2.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.1 FORGED_RCVD_HELO Received: contains a forged HELO 0.6 J_CHICKENPOX_83 BODY: 8alpha-pock-3alpha 0.0 HTML_MESSAGE BODY: HTML included in message 0.2 HTML_FONT_BIG BODY: HTML tag for a big font size 0.6 URIBL_SBL Contains an URL listed in the SBL blocklist [URIs: regardtomer.com] 1.2 PRIORITY_NO_NAME Message has priority, but no X-Mailer/User-Agent Return-Path: [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED] And what was actually displayed in the message ( in html) when copy and pasted and converted to text was entirely different than what it showed. I mean it had the V word the C word and all sorts Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]
