1.
Guys I am getting all my external domain emails tagged as SpamSpam
2.
3.
logs are attached.
4.
mail headers
5.
6.
Return-Path: <u...@gmail.com>
7.
Delivered-To: u...@domain.com
8.
Received: from localhost (localhost [127.0.0.1])
9.
by mail1.domain.com <http://hades.domain.com/> (Postfix) with ESMTP
id
10.
39B3C12B71D
11.
for <u...@domain.com>; Tue, 29 Sep 2009 10:19:57 +0600 (PKST)
12.
X-Quarantine-ID: <asR-LhZoxUsQ>
13.
X-Amavis-Alert: BAD HEADER Improper folded header field made up
entirely of
14.
whitespace (char 20 hex): Subject: ...?Q?Spam?=3D\n
15.
=3D?utf-8?Q?Spam=3D0D=3D0A=3D20helo123?=3D\n \n
16.
Received: from mail1.domain.com ([127.0.0.1])
17.
by localhost (mail2.domain.com [127.0.0.1]) (amavisd-new, port
10024)
18.
with LMTP id asR-LhZoxUsQ for <u...@domain.com>;
19.
Tue, 29 Sep 2009 10:19:56 +0600 (PKST)
20.
Received: from mail.domain.com (unknown [203.101.170.27])
21.
by mail1.domain.com (Postfix) with ESMTP id C6CF512B701
22.
for <u...@domain.com>; Tue, 29 Sep 2009 10:19:54 +0600 (PKST)
23.
Received: from localhost (localhost [127.0.0.1])
24.
by muses.domain.com (Postfix) with ESMTP id 6982319B322
25.
for <u...@domain.com>; Tue, 29 Sep 2009 10:19:53 +0600 (PKST)
26.
X-Virus-Scanned: Debian amavisd-new at domain.com
27.
Received: from mail.domain.com <http://muses.domain.com/>
([127.0.0.1])
28.
by localhost (mail.domain.com <http://muses.domain.com/>
[127.0.0.1])
29.
(amavisd-new, port 10024)
30.
with LMTP id A1fSGV+XdA-K for <u...@domain.com>;
31.
Tue, 29 Sep 2009 10:19:49 +0600 (PKST)
32.
Received: from mail-qy0-f191.google.com (mail-qy0-f191.google.com
33.
[209.85.221.191])
34.
by mail.domain.com (Postfix) with ESMTP id B3AB03BE38
35.
for <u...@domain.com>; Tue, 29 Sep 2009 10:19:44 +0600 (PKST)
36.
Received: by qyk29 with SMTP id 29so3777375qyk.32
37.
for <u...@domain.com>; Mon, 28 Sep 2009 21:19:40 -0700 (PDT)
38.
DKIM-Signature: v=3D1; a=3Drsa-sha256; c=3Drelaxed/relaxed;
39.
d=3Dgmail.com; s=3Dgamma;
40.
h=3Ddomainkey-signature:mime-version:received:date:message-id:subjec=
41.
t
42.
:from:to:content-type;
43.
bh=3DWoV7lT+YT3JKxromudz0thKd6Y5aCdlJ7QFXjsxBCvc=3D;
44.
b=3Dsuj1zJ/bZjwhfYDIy4YWp9YGpL4TFSKVOPm0R8ps0+kIV4SlldvI8A23Vtd2eXAz=
45.
hd
46.
/pdlqvr7uGT4MR777LO27yKPEaNjqT2dPEVlFXAtc+vQq0Ib2WPPQMR70+77h7Bcfki=
47.
r
48.
IIELi+qXFfqj4/IpAcTlP3YtSFfwj42KT+MJs=3D
49.
DomainKey-Signature: a=3Drsa-sha1; c=3Dnofws;
50.
d=3Dgmail.com; s=3Dgamma;
51.
h=3Dmime-version:date:message-id:subject:from:to:content-type;
52.
b=3DmHuhtzREpgetfc3a2kwtOBZZ47s0NR/Qje/GDeE5ZzNUMxOdvU9TtLZqZUM1KVDv=
53.
6u
54.
dTs/wcIM133W1aDhZJzp4YTFIfmzCz1M/YJeo7+lDNcHERQ0Y6ilLjzoZ7NRf69H3bK=
55.
n
56.
RGQxQ9yCAjwLI3FbAgyDtZtW7CYFyKBWNP7M8=3D
57.
MIME-Version: 1.0
58.
Received: by 10.229.1.65 with SMTP id 1mr1690588qce.20.1254197980062;
Mon,
59.
28
60.
Sep 2009 21:19:40 -0700 (PDT)
61.
Date: Tue, 29 Sep 2009 10:19:40 +0600
62.
Message-ID:
<a2649fac0909282119l2140bf18odaf14d74bab76...@mail.gmail.com>
63.
Subject: =3D?utf-8?Q?Spam?=3D
64.
=3D?utf-8?Q?Spam=3D0D=3D0A=3D20helo123?=3D
65.
66.
67.
68.
spamassassin debug logs
69.
#spamassassin -t -D
72.
X-Spam-Checker-Version: SpamAssassin 3.1.7-deb (2006-10-05) on
mail.domaon.=
73.
com
74.
X-Spam-Level: ****
75.
X-Spam-Status: No, score=3D4.8 required=3D5.0
tests=3DDCC_CHECK,DNS_FROM_RF=
76.
C_ABUSE,
77.
DNS_FROM_RFC_POST,HTML_MESSAGE,SUBJECT_ENCODED_TWICE,
78.
SUBJECT_EXCESS_QP autolearn=3Dno version=3D3.1.7-deb
79.
Delivered-To: u...@domaon.com
80.
Received: from localhost (localhost [127.0.0.1])
81.
by mail1.domaon.com (Postfix) with ESMTP id C13911B32DB
82.
for <u...@domaon.com>; Wed, 30 Sep 2009 17:03:54 +0600 (PKST)
83.
Received: from mail1.domaon.com ([127.0.0.1])
84.
by localhost (mail1.domaon.com [127.0.0.1]) (amavisd-new, port
10024)
85.
with LMTP id p23bnIio88SC for <u...@domaon.com>;
86.
Wed, 30 Sep 2009 17:03:54 +0600 (PKST)
87.
Received: from mail.domaon.com (unknown [203.101.170.27])
88.
by mail1.domaon.com (Postfix) with ESMTP id 22F7D1B32D7
89.
for <u...@domaon.com>; Wed, 30 Sep 2009 17:03:53 +0600 (PKST)
90.
Received: from localhost (localhost [127.0.0.1])
91.
by mail.domaon.com (Postfix) with ESMTP id 976D319B330
92.
for <u...@domaon.com>; Wed, 30 Sep 2009 17:03:53 +0600 (PKST)
93.
X-Virus-Scanned: Debian amavisd-new at domaon.com
94.
Received: from mail.domaon.com ([127.0.0.1])
95.
by localhost (mail.domaon.com [127.0.0.1]) (amavisd-new, port
10024)
96.
with LMTP id el+R1y6R6iaa for <u...@domaon.com>;
97.
Wed, 30 Sep 2009 17:03:53 +0600 (PKST)
98.
Received: from snt0-omc1-s35.snt0.hotmail.com
99.
(snt0-omc1-s35.snt0.hotmail.com [65.55.90.46])
100.
by mail.domaon.com (Postfix) with ESMTP id D14C419B32D
101.
for <u...@domaon.com>; Wed, 30 Sep 2009 17:03:52 +0600 (PKST)
102.
Received: from SNT106-W54 ([65.55.90.7]) by
103.
snt0-omc1-s35.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
104.
Wed, 30 Sep 2009 04:03:47 -0700
105.
Message-ID: <snt106-w548ae03faf450123dbc928f6...@phx.gbl>
106.
Content-Type: multipart/alternative;
107.
boundary=3D"_4abea601-ec42-4378-af03-83675013aef6_"
108.
X-Originating-IP: [125.209.118.102]
109.
From: mohsin alizai <mohsinaliz...@hotmail.com>
110.
To: <u...@domaon.com>
111.
Subject: =3D?utf-8?Q?Spam?=3D
112.
=3D?utf-8?Q?Spam=3D0D=3D0A=3D20test?=3D
113.
Date: Wed, 30 Sep 2009 11:03:47 +0000
114.
Importance: Normal
115.
MIME-Version: 1.0
116.
X-OriginalArrivalTime: 30 Sep 2009 11:03:47.0973 (UTC)
117.
FILETIME=3D[AF55A350:01CA41BD]
118.
X-SpamInfo: return-email, failed to obtain DNS record for domain
hotmail.co=
119.
m
120.
X-SpamInfo: return-email, failed to obtain DNS record for domain
hotmail.co=
121.
m
122.
123.
--_4abea601-ec42-4378-af03-83675013aef6_
124.
Content-Type: text/plain; charset=3D"Windows-1252"
125.
Content-Transfer-Encoding: quoted-printable
126.
127.
128.
test =3D0A=3D
129.
_________________________________________________________________=3D0A=3D
130.
Lauren found her dream laptop. Find the PC that=3D92s right for
131.
you.=3D0A=3Dhttp://www.microsoft.com/windows/choosepc/?ocid=3D3Dftp_val_wl_=
132.
290=3D
133.
134.
--_4abea601-ec42-4378-af03-83675013aef6_
135.
Content-Type: text/html; charset=3D"Windows-1252"
136.
Content-Transfer-Encoding: quoted-printable
137.
138.
<html>
139.
<head>
140.
<style><!--
141.
.hmmessage P
142.
{
143.
margin:0px=3D3B
144.
padding:0px
145.
}
146.
body.hmmessage
147.
{
148.
font-size: 10pt=3D3B
149.
font-family:Verdana
150.
}
151.
--></style>
152.
</head>
153.
154.
<body class=3D3D'hmmessage'>
155.
test <br /><hr />Lauren found her
dream laptop. 3D3D'htt= Find the PC that=3D92s right for you. </body>
160.
</html>=3D
161.
162.
--_4abea601-ec42-4378-af03-83675013aef6_--
163.
164.
Spam detection software, running on the system "mail.domaon.com", has
165.
identified this incoming email as possible spam. The original message
166.
has been attached to this so you can view it (if it isn't spam) or
label
167.
similar future email. If you have any questions, see
168.
the administrator of that system for details.
169.
170.
Content preview: test Lauren found her dream laptop. Find the PC
that=92s
171.
right for you.
172.
http://www.microsoft.com/windows/choosepc/?ocid=3Dftp_val_wl_290 test
173.
[...]
174.
175.
Content analysis details: (4.8 points, 5.0 required)
176.
177.
pts rule name description
178.
---- ----------------------
-----------------------------------------------=
179.
---
180.
1.5 SUBJECT_ENCODED_TWICE Subject: MIME encoded twice
181.
0.0 HTML_MESSAGE BODY: HTML included in message
182.
1.4 DCC_CHECK Listed in DCC
(http://rhyolite.com/anti-spam/dc=
183.
c/)
184.
0.5 DNS_FROM_RFC_ABUSE RBL: Envelope sender in
abuse.rfc-ignorant.org
185.
1.4 DNS_FROM_RFC_POST RBL: Envelope sender in
186.
postmaster.rfc-ignorant.org
187.
0.0 SUBJECT_EXCESS_QP Subject: quoted-printable encoded
unnecessarily
188.
189.
190.
191.
--=20
192.
Regards
193.
194.
--00235447101489b72c0474cae3e3
195.
Content-Type: text/html; charset=windows-1252
196.
Content-Transfer-Encoding: quoted-printable
197.
198.
Guys=A0<div>I am getting all my external domain=A0emails=A0tagged=A0as
Spam=
199.
Spam<br clear=3D"all"><br></div><div>logs are attached.</div><div>mail
head=
200.
ers</div><div><br></div><div>R=
202.
eturn-Path: < 3D"mailto:u...@gmail.com"; u...@gmail.com ><br>
204.
Delivered-To:=A0 3D"mailto:u...@domain.com"; u...@domain.com
<br>Received: from localh=
206.
ost (localhost [127.0.0.1])<br>=A0 =A0by=A0mail1 3D"http://hades.dom=
.domain.com=
208.
=A0(Postfix) with ESMTP id 39B3C12B71D<br>
209.
=A0 =A0for < 3D"mailto:u...@domain.com"; u...@domain.com >; Tue,
29 Sep 2009 10=
211.
:19:57 +0600 (PKST)<br>X-Quarantine-ID:
<asR-LhZoxUsQ><br>X-Amavis-Al=
212.
ert: BAD HEADER Improper folded header field made up entirely of<br>
213.
=A0 =A0whitespace (char 20 hex): Subject: ...?Q?Spam?=3D\n<br>=A0
=A0=3D?ut=
214.
f-8?Q?Spam=3D0D=3D0A=3D20helo123?=3D\n \n<br>Received: from=A0 3D"ht=
mail1.domain.com =A0([127.0.0.1])<br>
217.
=A0 =A0by localhost ( 3D"http://mail2.domain.com/"; mail2.domain.com
=A0[127.0.0.1]) (a=
219.
mavisd-new, port 10024)<br>=A0 =A0with LMTP id asR-LhZoxUsQ for <
220. u...@domain.com >;<br>
222.
=A0 =A0Tue, 29 Sep 2009 10:19:56 +0600 (PKST)<br>Received: from=A0
223. mail.domain.com =A0(unknown [203.101.170.27])<br>=A0 =A0by=A0
3D"http://mail1.domain.com/"; mail1.domain.com =A0(Postfix) with ESMTP id
C6CF512B701<br>
227.
=A0 =A0for < 3D"mailto:u...@domain.com"; u...@domain.com >; Tue,
29 Sep 2009 10=
229.
:19:54 +0600 (PKST)<br>Received: from localhost (localhost
[127.0.0.1])<br>=
230.
=A0 =A0by=A0 3D"http://muses.domain.com/"; muses.domain.com
=A0(Postfix) with ESMTP id =
232.
6982319B322<br>
233.
=A0 =A0for < 3D"mailto:u...@domain.com"; u...@domain.com >; Tue,
29 Sep 2009 10=
235.
:19:53 +0600 (PKST)<br>X-Virus-Scanned: Debian amavisd-new at=A0 3D"=
d=
237.
omain.com <br>
238.
Received: from=A0mail 3D"http://muses.domain.com/"; .domain.com
=A0([127.0.0.1])<br>=A0=
240.
=A0by localhost (mail 3D"http://muses.domain.com/"; .domain.com
=A0[127.0.0.1]) (amavi=
242.
sd-new, port 10024)<br>
243.
=A0 =A0with LMTP id A1fSGV+XdA-K for < 3D"mailto:u...@domain.com"=
u...@domain.com &=
245.
gt;;<br>=A0 =A0Tue, 29 Sep 2009 10:19:49 +0600 (PKST)<br>Received:
from=A0<=
246.
a href=3D"http://mail-qy0-f191.google.com/"; target=3D"_blank"
style=3D"colo=
247.
r: rgb(42, 93, 176); ">mail-qy0-f191.google.com =A0( 3D"http://ma=
mail-qy0-f191.google.com =A0[209.85.221.191])<br>
250.
=A0 =A0by=A0 3D"http://mail.domain.com/"; mail.domain.com =A0(Postfix)
with ESMTP id B3=
252.
AB03BE38<br>=A0 =A0for < 3D"mailto:u...@domain.com"; u...@domain.com
>; Tue, 29 S=
254.
ep 2009 10:19:44 +0600 (PKST)<br>
255.
Received: by qyk29 with SMTP id 29so3777375qyk.32<br>=A0 =A0 =A0
=A0for <=
256.
; 3D"mailto:u...@domain.com"; u...@domain.com >; Mon, 28 Sep 2009
21:19:40 -0700 (PD=
258.
T)<br>DKIM-Signature: v=3D1; a=3Drsa-sha256; c=3Drelaxed/relaxed;<br>
259.
=A0 =A0 =A0 =A0d=3D 3D"http://gmail.com/"; gmail.com ;
s=3Dgamma;<br>=A0 =A0 =A0 =A0h=
261.
=3Ddomainkey-signature:mime-version:received:date:message-id:subject<br>=A0=
262.
=A0 =A0 =A0 :from:to:content-type;<br>
263.
=A0 =A0 =A0
=A0bh=3DWoV7lT+YT3JKxromudz0thKd6Y5aCdlJ7QFXjsxBCvc=3D;<br>=A0 =
264.
=A0 =A0
=A0b=3Dsuj1zJ/bZjwhfYDIy4YWp9YGpL4TFSKVOPm0R8ps0+kIV4SlldvI8A23Vtd2=
265.
eXAzhd<br>=A0 =A0 =A0 =A0
/pdlqvr7uGT4MR777LO27yKPEaNjqT2dPEVlFXAtc+vQq0Ib2=
266.
WPPQMR70+77h7Bcfkir<br>=A0 =A0 =A0 =A0
IIELi+qXFfqj4/IpAcTlP3YtSFfwj42KT+MJ=
267.
s=3D<br>
268.
DomainKey-Signature: a=3Drsa-sha1; c=3Dnofws;<br>=A0 =A0 =A0 =A0d=3D
269. gmail.com ; s=3Dgamma;<br>=A0 =A0 =A0 =A0h=3Dmime-version:date:message=
271.
-id:subject:from:to:content-type;<br>
272.
=A0 =A0 =A0
=A0b=3DmHuhtzREpgetfc3a2kwtOBZZ47s0NR/Qje/GDeE5ZzNUMxOdvU9TtLZq=
273.
ZUM1KVDv6u<br>=A0 =A0 =A0 =A0
dTs/wcIM133W1aDhZJzp4YTFIfmzCz1M/YJeo7+lDNcHE=
274.
RQ0Y6ilLjzoZ7NRf69H3bKn<br>=A0 =A0 =A0 =A0
RGQxQ9yCAjwLI3FbAgyDtZtW7CYFyKBW=
275.
NP7M8=3D<br>MIME-Version: 1.0<br>
276.
Received: by 10.229.1.65 with SMTP id 1mr1690588qce.20.1254197980062;
Mon, =
277.
28<br>=A0 =A0Sep 2009 21:19:40 -0700 (PDT)<br>Date: Tue, 29 Sep 2009
10:19:=
278.
40 +0600<br>Message-ID: < 3D"mailto:a2649fac0909282119l2140bf18od=
a2649fac0909282119l2140bf18odaf14d74bab76...@mail.gmail.com &=
281.
gt;<br>
282.
Subject:
=3D?utf-8?Q?Spam?=3D<br>=A0=3D?utf-8?Q?Spam=3D0D=3D0A=3D20helo123?=
283.
=3D<br></div><div><br></div>
286.
<div><br></fo=
288.
nt></div><div><=
289.
span class=3D"Apple-style-span" style=3D"border-collapse:
collapse;"><br>
290.
</div><div>spamassassin debug logs</div><div>#spamassassin -t -D
<email that i=A0rec=
295.
eive=A0</div>
296.
<div><pre style=3D"word-wrap: break-word; white-space: pre-wra=
299.
p; ">Return-Path: < 3D"mailto:mohsinaliz...@hotmail.com"; mohsinal=
300.
iz...@hotmail.com >
301.
X-Spam-Checker-Version: SpamAssassin 3.1.7-deb (2006-10-05) on 3D"h=
mail.domaon.com
303.
X-Spam-Level: ****
304.
X-Spam-Status: No, score=3D4.8 required=3D5.0
tests=3DDCC_CHECK,DNS_FROM_RF=
305.
C_ABUSE,
306.
DNS_FROM_RFC_POST,HTML_MESSAGE,SUBJECT_ENCODED_TWICE,
307.
SUBJECT_EXCESS_QP autolearn=3Dno version=3D3.1.7-deb
308.
Delivered-To: 3D"mailto:u...@domaon.com"; u...@domaon.com
309.
Received: from localhost (localhost [127.0.0.1])
310.
by 3D"http://mail1.domaon.com"; mail1.domaon.com (Postfix)
with=
311.
ESMTP id C13911B32DB
312.
for < 3D"mailto:u...@domaon.com"; u...@domaon.com >; Wed,
3=
313.
0 Sep 2009 17:03:54 +0600 (PKST)
314.
Received: from 3D"http://mail1.domaon.com"; mail1.domaon.com ([1=
315.
27.0.0.1])
316.
by localhost ( 3D"http://mail1.domaon.com"; mail1.domaon.com
[12=
317.
7.0.0.1]) (amavisd-new, port 10024)
318.
with LMTP id p23bnIio88SC for < 3D"mailto:u...@domaon.com";
u...@=
319.
domaon.com >;
320.
Wed, 30 Sep 2009 17:03:54 +0600 (PKST)
321.
Received: from 3D"http://mail.domaon.com"; mail.domaon.com (unkn=
322.
own [203.101.170.27])
323.
by 3D"http://mail1.domaon.com"; mail1.domaon.com (Postfix)
with=
324.
ESMTP id 22F7D1B32D7
325.
for < 3D"mailto:u...@domaon.com"; u...@domaon.com >; Wed,
3=
326.
0 Sep 2009 17:03:53 +0600 (PKST)
327.
Received: from localhost (localhost [127.0.0.1])
328.
by 3D"http://mail.domaon.com"; mail.domaon.com (Postfix) with
E=
329.
SMTP id 976D319B330
330.
for < 3D"mailto:u...@domaon.com"; u...@domaon.com >; Wed,
3=
331.
0 Sep 2009 17:03:53 +0600 (PKST)
332.
X-Virus-Scanned: Debian amavisd-new at 3D"http://domaon.com"; domaon=
333.
.com
334.
Received: from 3D"http://mail.domaon.com"; mail.domaon.com ([127=
335.
.0.0.1])
336.
by localhost ( 3D"http://mail.domaon.com"; mail.domaon.com
[127.=
337.
0.0.1]) (amavisd-new, port 10024)
338.
with LMTP id el+R1y6R6iaa for < 3D"mailto:u...@domaon.com";
u...@=
339.
domaon.com >;
340.
Wed, 30 Sep 2009 17:03:53 +0600 (PKST)
341.
Received: from 3D"http://snt0-omc1-s35.snt0.hotmail.com"; snt0-omc1-=
342.
s35.snt0.hotmail.com ( 3D"http://snt0-omc1-s35.snt0.hotmail.com"=
snt0-omc1-s35.snt0.hotmail.com [65.55.90.46])
344.
by 3D"http://mail.domaon.com"; mail.domaon.com (Postfix) with
E=
345.
SMTP id D14C419B32D
346.
for < 3D"mailto:u...@domaon.com"; u...@domaon.com >; Wed,
3=
347.
0 Sep 2009 17:03:52 +0600 (PKST)
348.
Received: from SNT106-W54 ([65.55.90.7]) by 3D"http://snt0-omc1-s35=
snt0-omc1-s35.snt0.hotmail.com with Microsoft SMTPSV=
350.
C(6.0.3790.3959);
351.
Wed, 30 Sep 2009 04:03:47 -0700
352.
Message-ID: <snt106-w548ae03faf450123dbc928f6...@phx.gbl>
353.
Content-Type: multipart/alternative;
354.
boundary=3D"_4abea601-ec42-4378-af03-83675013aef6_"
355.
X-Originating-IP: [125.209.118.102]
356.
From: mohsin alizai < 3D"mailto:mohsinaliz...@hotmail.com"; mohsin=
357.
aliz...@hotmail.com >
358.
To: < 3D"mailto:u...@domaon.com"; u...@domaon.com >
359.
Subject: =3D?utf-8?Q?Spam?=3D
360.
=3D?utf-8?Q?Spam=3D0D=3D0A=3D20test?=3D=20
361.
Date: Wed, 30 Sep 2009 11:03:47 +0000
362.
Importance: Normal
363.
MIME-Version: 1.0
364.
X-OriginalArrivalTime: 30 Sep 2009 11:03:47.0973 (UTC)
FILETIME=3D[AF55A350=
365.
:01CA41BD]
366.
X-SpamInfo: return-email, failed to obtain DNS record for domain 3D=
hotmail.com
368.
X-SpamInfo: return-email, failed to obtain DNS record for domain 3D=
hotmail.com
370.
371.
--_4abea601-ec42-4378-af03-83675013aef6_
372.
Content-Type: text/plain; charset=3D"Windows-1252"
373.
Content-Transfer-Encoding: quoted-printable
374.
375.
376.
test =3D0A=3D
377.
_________________________________________________________________=3D0A=3D
378.
Lauren found her dream laptop. Find the PC that=3D92s right for
you.=3D0A=
379.
=3D
380.
3D"http://www.microsoft.com/windows/choosepc/?ocid=3D3Dftp_val_wl_2=
http://www.microsoft.com/windows/choosepc/?ocid=3D3Dftp_val_wl_290=
382.
=3D
383.
384.
--_4abea601-ec42-4378-af03-83675013aef6_
385.
Content-Type: text/html; charset=3D"Windows-1252"
386.
Content-Transfer-Encoding: quoted-printable
387.
388.
<html>
389.
<head>
390.
<style><!--
391.
.hmmessage P
392.
{
393.
margin:0px=3D3B
394.
padding:0px
395.
}
396.
body.hmmessage
397.
{
398.
font-size: 10pt=3D3B
399.
font-family:Verdana
400.
}
401.
--></style>
402.
</head>
403.
404.
<body class=3D3D'hmmessage'>
405.
test <br /><hr
/>Lauren found her dream laptop. <=
406.
a href=3D3D'http:=3D
407.
// 3D"http://www.microsoft.com/windows/choosepc/?ocid=3D3Dftp_val_wl=
www.microsoft.com/windows/choosepc/?ocid=3D3Dftp_val_wl_290 ' =
409.
target=3D3D'_new=3D
410.
'>Find the PC that=3D92s right for you.</a></body>
411.
</html>=3D
412.
413.
--_4abea601-ec42-4378-af03-83675013aef6_--
414.
415.
Spam detection software, running on the system " 3D"http://mail=
mail.domaon.com ", has
417.
identified this incoming email as possible spam. The original message
418.
has been attached to this so you can view it (if it isn't spam) or
labe=
419.
l
420.
similar future email. If you have any questions, see
421.
the administrator of that system for details.
422.
423.
Content preview: test Lauren found her dream laptop. Find the PC
that=92s
424.
right for you.
425.
3D"http://www.microsoft.com/windows/choosepc/?ocid=3Dftp_val_wl_2=
http://www.microsoft.com/windows/choosepc/?ocid=3Dftp_val_wl_290 te=
427.
st
428.
[...]=20
429.
430.
Content analysis details: (4.8 points, 5.0 required)
431.
432.
pts rule name description
433.
---- ----------------------
-----------------------------------------------=
434.
---
435.
1.5 SUBJECT_ENCODED_TWICE Subject: MIME encoded twice
436.
0.0 HTML_MESSAGE BODY: HTML included in message
437.
1.4 DCC_CHECK Listed in DCC ( 3D"http://rhyolite.com/a=
http://rhyolite.com/anti-spam/dcc/ )
439.
0.5 DNS_FROM_RFC_ABUSE RBL: Envelope sender in 3D"http://abuse=
abuse.rfc-ignorant.org
441.
1.4 DNS_FROM_RFC_POST RBL: Envelope sender in
442.
3D"http://postmaster.rfc-ignorant.org"; =
443.
postmaster.rfc-ignorant.org
444.
0.0 SUBJECT_EXCESS_QP Subject: quoted-printable encoded
unnecessarily
445.
</pre><div><br></=
447.
div></div><div><br>-- <br>Regards<br><br><br>
448.
</div>
--
View this message in context:
http://www.nabble.com/I-am-getting-all-external-domain-emails-subject-tagged-as-SpamSpam-tp25685055p25685055.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
