On Dienstag, 4. April 2006 09:23 Michael Monnerie wrote:
> Hi, I got feedback today that they use "Mass Mailer" to send their
> e-mails. So it's really a forged OE Mail. I told them to use
> something else, otherwise they won't be able to contact a lot of
> customers...

I received another e-mail from them, marked as SPAM. I believe it's too 
strong to give a total of 5.8 points for FORGED_.*OUTLOOK.* rules, as 
they are similar.

X-Spam-Status: Yes, hits=6.132 tagged_above=-999 required=5
 tests=FORGED_MUA_OUTLOOK=3.36, FORGED_OUTLOOK_HTML=2.514,
 HTML_FONT_BIG=0.256, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.001

Mass_checks on my corpus says:
MSECS    SPAM%     HAM%     S/O    RANK   SCORE  NAME
0.679   0.9814   0.2599    0.791   0.57    3.36  FORGED_MUA_OUTLOOK
0.557   0.8144   0.2021    0.801   0.56    3.25  FORGED_OUTLOOK_HTML

It looks like most e-mails hit both rules, or am I wrong?

mfg zmi
-- 
// Michael Monnerie, Ing.BSc    -----      http://it-management.at
// Tel: 0660/4156531                          .network.your.ideas.
// PGP Key:   "lynx -source http://zmi.at/zmi3.asc | gpg --import"
// Fingerprint: 44A3 C1EC B71E C71A B4C2  9AA6 C818 847C 55CB A4EE
// Keyserver: www.keyserver.net                 Key-ID: 0x55CBA4EE

Attachment: pgpajrRC8OypB.pgp
Description: PGP signature

Reply via email to