Chris wrote:
On Tuesday 29 May 2007 9:52 am, ram wrote:
This is a very intelligently written scam mail
http://ecm.netcore.co.in/tmp/missed.txt
I set my servers to pretty aggressive custom rules , but I am not able
to catch this spam
Bayes has messed up agreed but even not counting bayes almost no other
rules hit. Notwithstanding using custom spamscanner from commtouch to
complement spamassassin
I get
Content analysis details: (19.0 points, 7.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.8 UNDISC_RECIPS Valid-looking To "undisclosed-recipients"
1.2 TVD_RCVD_SPACE_BRACKET Received header has a spammy looking section
1.5 ROUND_THE_WORLD Received: says mail sent around the world (DNS)
3.0 FORGED_RCVD_HELO Received: contains a forged HELO
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
lines
8.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
above 50%
[cf: 73]
1.0 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 73]
1.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is a abuseable web server
[206.51.237.119 listed in dnsbl.sorbs.net]
