> >
> > from='"=?utf-8?Q?Joe=20Blow?="
> >
> > how should this be dealt with in a rule ?
> >
> > i would take that rule and put it in a meta combination
>
> That's a perfectly valid way to encode text that contains
> non-ASCII characters. Does it appear in mails that you know
> are spam, and that did not score very high from other rules?
>
> --
> John Hardin KA7OHZ
John
here are 4 ones that are scoring like this (note: i removed a special 2.0
hit on a coupla them that gives away private info)
also note, some get rejected as spam and some make it through below
rejection levels
-0.4 RCVD_IN_JMF_W RBL: Sender listed in JMF-WHITE
[208.66.204.133 listed in
hostkarma.junkemailfilter.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.1 SPF_PASS SPF: sender matches SPF record
0.1 PHISH_05 BODY: Phishing for account information
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5000]
-0.4 RCVD_IN_JMF_W RBL: Sender listed in JMF-WHITE
[208.66.204.133 listed in
hostkarma.junkemailfilter.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.1 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayesian spam probability is 95 to 99%
[score: 0.9849]
1.5 SAGREY Adds 1.0 to spam from first-time senders
1.6 CKJ_META1 CKJ_META1
-0.4 RCVD_IN_JMF_W RBL: Sender listed in JMF-WHITE
[208.66.204.135 listed in
hostkarma.junkemailfilter.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.1 SPF_PASS SPF: sender matches SPF record
2.6 EXCUSE_24 BODY: Claims you wanted this ad
-0.2 BAYES_40 BODY: Bayesian spam probability is 20 to 40%
[score: 0.2602]
0.0 HTML_MESSAGE BODY: HTML included in message
0.6 SARE_UNI RAW: SARE_UNI
1.7 FF_IHOPE_YOU_SINK FULL: Triple Floats, common viagra signs.
1.5 SAGREY Adds 1.0 to spam from first-time senders
-0.4 RCVD_IN_JMF_W RBL: Sender listed in JMF-WHITE
[208.66.204.132 listed in
hostkarma.junkemailfilter.com]
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 0.9961]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.1 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
1.5 SAGREY Adds 1.0 to spam from first-time senders
1.6 CKJ_META1 CKJ_META1
thanks
- rh
