From: Maciej Friedel [mailto:[EMAIL PROTECTED]
> 
> On 02/14/07 Jonathan wrote:
> 
> > http://www.pbp.net/~jnichols/spam2.txt
> 
> 0.0 BOTNET_NORDNS IP address has no PTR record
> 0.1 HTML_50_60 BODY: Message is 50% to 60% HTML      
> 0.0 HTML_MESSAGE BODY: HTML included in message
> 1.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% 
> [score: 0.5002]
> 5.0 BOTNET The submitting mail server looks like part of a Botnet
> 
> i think botnet is a good idea

 1.5 FH_RELAY_NODNS         We could not determine your Reverse DNS
 0.8 SARE_LWSHORTT          BODY: SARE_LWSHORTT
 1.7 SARE_PROLOSTOCK_SYM3   BODY: Last week's hot stock scam
 2.0 BAYES_80               BODY: Bayesian spam probability is 80 to 95%
                            [score: 0.8750]
 0.1 HTML_50_60             BODY: Message is 50% to 60% HTML
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
                [Blocked - see <http://www.spamcop.net/bl.shtml?211.48.218.5>]
 3.9 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [211.48.218.5 listed in zen.spamhaus.org]

I think SARE and some network tests are even better (scores 11.5 with my 
surprising Bayes :)

Giampaolo

> 
> maciek
> 
> -- 
> |_|0|_| Maciej Friedel <[EMAIL PROTECTED]>
> |_|_|0| http://wwv.pl - usługi hostingowe
> |0|0|0| http://eprogram.pl - projektowanie stron www

Reply via email to