> ...okay. What was the debugging output from that run?
>
See attachment.
> Does normal delivery run as root, or as a different user? If it runs as a
> different user, can that user perform the above manual test successfully?
>
Runs as root.
> Are you still seeing errors for normal mail delivery?
>
> Is your installation running spamd or spamassassin for normal processing?
>
spamd
Jul 11 14:55:34.257 [14578] dbg: FuzzyOcr: focr_bin_helper:
'pnmnorm,pnminvert,ppmtopgm'
Jul 11 14:55:34.258 [14578] info: FuzzyOcr: Adding <3> new helper apps
Jul 11 14:55:34.258 [14578] dbg: FuzzyOcr: focr_bin_helper: 'tesseract'
Jul 11 14:55:34.258 [14578] info: FuzzyOcr: Adding <1> new helper apps
Jul 11 14:55:34.259 [14578] info: FuzzyOcr: Starting preprocessor parser for
file "/etc/mail/spamassassin/FuzzyOcr.preps"...
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: preprocessor normalize {
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: command = pnmnorm
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: }
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: preprocessor invert {
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: command = pnminvert
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: }
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: preprocessor ppmtopgm {
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: command = ppmtopgm
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: }
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: preprocessor maketiff {
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: command = pnmtotiff
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: args = -color -truecolor
Jul 11 14:55:34.259 [14578] dbg: FuzzyOcr: line: }
Jul 11 14:55:34.260 [14578] info: FuzzyOcr: Starting scanset parser for file
"/etc/mail/spamassassin/FuzzyOcr.scansets"...
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line scanset ocrad {
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line command = $ocrad
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line args = -s5 $input
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line }
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line scanset ocrad-invert {
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line command = $ocrad
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line args = -s5 -i $input
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line }
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line scanset ocrad-decolorize-invert
{
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line preprocessors = ppmtopgm
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line command = $ocrad
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line args = -s5 -i $input
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line }
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line scanset ocrad-decolorize {
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line preprocessors = ppmtopgm
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line command = $ocrad
Jul 11 14:55:34.260 [14578] dbg: FuzzyOcr: line args = -s5 $input
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line }
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line scanset gocr {
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line command = $gocr
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line args = -i $input
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line }
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line scanset gocr-180 {
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line command = $gocr
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line args = -l 180 -d 2 -i $input
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line }
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line scanset tesseract {
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line preprocessors = maketiff
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line command = $tesseract
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line args = $input $output
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line force_output_in = $output.txt
Jul 11 14:55:34.261 [14578] dbg: FuzzyOcr: line }
Jul 11 14:55:34.821 [14578] info: FuzzyOcr: Searching in: /usr/local/netpbm/bin
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Searching in: /usr/local/bin
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Searching in: /usr/bin
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using gifsicle => /usr/bin/gifsicle
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using giffix => /usr/bin/giffix
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using giftext => /usr/bin/giftext
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using gifinter => /usr/bin/gifinter
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using giftopnm => /usr/bin/giftopnm
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using jpegtopnm =>
/usr/bin/jpegtopnm
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using pngtopnm => /usr/bin/pngtopnm
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using bmptopnm => /usr/bin/bmptopnm
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using tifftopnm =>
/usr/bin/tifftopnm
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using ppmhist => /usr/bin/ppmhist
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using pamfile => /usr/bin/pamfile
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using ocrad => /usr/bin/ocrad
Jul 11 14:55:34.822 [14578] dbg: FuzzyOcr: Cannot find executable for gocr
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using pnmnorm => /usr/bin/pnmnorm
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using pnminvert =>
/usr/bin/pnminvert
Jul 11 14:55:34.822 [14578] info: FuzzyOcr: Using ppmtopgm => /usr/bin/ppmtopgm
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: Cannot find executable for tesseract
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: Threshold[max_hash] => 5
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: Threshold[c] => 5
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: Threshold[s] => 0.01
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: Threshold[w] => 0.01
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: Threshold[h] => 0.01
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: Threshold[cn] => 0.01
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: focr_add_score => 1
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: focr_autodisable_negative_score => -5
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: focr_autodisable_score => 1000
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: focr_autosort_buffer => 10
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: focr_autosort_scanset => 1
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: focr_base_score => 5
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: focr_corrupt_score => 2.5
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: focr_corrupt_unfixable_score => 5
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: focr_counts_required => 2
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: focr_db_hash =>
/etc/mail/spamassassin/FuzzyOcr.db
Jul 11 14:55:34.823 [14578] dbg: FuzzyOcr: focr_db_max_days => 35
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_db_safe =>
/etc/mail/spamassassin/FuzzyOcr.safe.db
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_digest_db =>
/etc/mail/spamassassin/FuzzyOcr.hashdb
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_enable_image_hashing => 0
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_global_timeout => 0
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_global_wordlist =>
/etc/mail/spamassassin/FuzzyOcr.words
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_hashing_learn_scanned => 1
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_keep_bad_images => 0
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_log_pmsinfo => 1
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_log_stderr => 1
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_max_height => 800
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_max_width => 800
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_min_height => 4
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_min_width => 4
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_minimal_scanset => 1
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_mysql_db => FuzzyOcr
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_mysql_hash => Hash
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_mysql_host => localhost
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_mysql_port => 3306
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_mysql_safe => Safe
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_mysql_update_hash => 0
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_mysql_user => fuzzyocr
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_no_homedirs => 0
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_path_bin =>
/usr/local/netpbm/bin:/usr/local/bin:/usr/bin
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_pdf_maxpages => 1
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_personal_wordlist =>
__userstate__/FuzzyOcr.words
Jul 11 14:55:34.824 [14578] dbg: FuzzyOcr: focr_preprocessor_file =>
/etc/mail/spamassassin/FuzzyOcr.preps
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_scan_pdfs => 0
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_scanset_file =>
/etc/mail/spamassassin/FuzzyOcr.scansets
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_score_ham => 0
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_skip_bmp => 0
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_skip_gif => 0
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_skip_jpeg => 0
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_skip_png => 0
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_skip_tiff => 0
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_skip_updates => 0
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_strip_numbers => 1
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_threshold => 0.25
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_timeout => 10
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_twopass_scoring_factor => 1.5
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_unique_matches => 0
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_verbose => 1
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_wrongctype_score => 1.5
Jul 11 14:55:34.825 [14578] dbg: FuzzyOcr: focr_wrongext_score => 1.5
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Loaded preprocessor normalize:
/usr/bin/pnmnorm
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Loaded preprocessor invert:
/usr/bin/pnminvert
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Loaded preprocessor ppmtopgm:
/usr/bin/ppmtopgm
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Loaded preprocessor maketiff:
pnmtotiff -color -truecolor
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Using scan ocrad: /usr/bin/ocrad
-s5 $input
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Using scan ocrad-invert:
/usr/bin/ocrad -s5 -i $input
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Using scan ocrad-decolorize-invert:
/usr/bin/ocrad -s5 -i $input
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Using scan ocrad-decolorize:
/usr/bin/ocrad -s5 $input
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Using scan gocr: $gocr -i $input
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Using scan gocr-180: $gocr -l 180
-d 2 -i $input
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Using scan tesseract: $tesseract
$input $output
Jul 11 14:55:34.826 [14578] info: FuzzyOcr: Added <44> words from
"/etc/mail/spamassassin/FuzzyOcr.words"
Jul 11 14:55:35.937 [14578] dbg: FuzzyOcr: Starting FuzzyOcr...
Jul 11 14:55:35.937 [14578] info: FuzzyOcr: Processing Message with ID
"<000001c6b760$e0a08f00$0100007f@localhost>" ("Collin Cox"
<profte...@noeldrennan.net> -> <christian_hol...@web.de>)
Jul 11 14:55:35.937 [14578] dbg: FuzzyOcr: fname: "image001.jpg" =>
"image001.jpg"
Jul 11 14:55:35.937 [14578] info: FuzzyOcr: JPEG: [246x443] image001.jpg (15237)
Jul 11 14:55:35.960 [14578] dbg: FuzzyOcr: Saved:
/tmp/.spamassassin14578dSnRTbtmp/image001.jpg
Jul 11 14:55:35.960 [14578] dbg: FuzzyOcr: Saved:
/tmp/.spamassassin14578dSnRTbtmp/raw.eml
Jul 11 14:55:35.960 [14578] info: FuzzyOcr: Found: 1 images
Jul 11 14:55:35.961 [14578] dbg: FuzzyOcr: pfile =>
/tmp/.spamassassin14578dSnRTbtmp/image001.jpg.pnm
Jul 11 14:55:35.961 [14578] dbg: FuzzyOcr: efile =>
/tmp/.spamassassin14578dSnRTbtmp/image001.jpg.err
Jul 11 14:55:35.961 [14578] dbg: FuzzyOcr: Errors to:
/tmp/.spamassassin14578dSnRTbtmp/raw.err
Jul 11 14:55:35.961 [14578] dbg: FuzzyOcr: File has Content-Type "image/jpeg"
and File Extension "jpg"
Jul 11 14:55:35.961 [14578] info: FuzzyOcr: Found JPEG header
name="image001.jpg"
Jul 11 14:55:35.962 [14578] dbg: FuzzyOcr: Saved pid: 14581
Jul 11 14:55:35.962 [14581] dbg: FuzzyOcr: Exec : /usr/bin/jpegtopnm
/tmp/.spamassassin14578dSnRTbtmp/image001.jpg
Jul 11 14:55:35.962 [14581] dbg: FuzzyOcr: Stdout:
>/tmp/.spamassassin14578dSnRTbtmp/image001.jpg.pnm
Jul 11 14:55:35.962 [14581] dbg: FuzzyOcr: Stderr:
>>/tmp/.spamassassin14578dSnRTbtmp/image001.jpg.err
Jul 11 14:55:35.969 [14578] dbg: FuzzyOcr: Elapsed [14581]: 0.007670 sec.
(/usr/bin/jpegtopnm: exit 0)
Jul 11 14:55:35.969 [14578] info: FuzzyOcr: Image hashing disabled in
configuration, skipping...
Jul 11 14:55:35.969 [14578] info: FuzzyOcr: Scanset Order: ocrad(0)
ocrad-invert(0) ocrad-decolorize-invert(0) ocrad-decolorize(0) gocr(0)
gocr-180(0) tesseract(0)
Jul 11 14:55:35.970 [14578] dbg: FuzzyOcr: Saved pid: 14582
Jul 11 14:55:35.970 [14582] dbg: FuzzyOcr: Exec : /usr/bin/ocrad -s5
/tmp/.spamassassin14578dSnRTbtmp/image001.jpg.pnm
Jul 11 14:55:35.970 [14582] dbg: FuzzyOcr: Stdout:
>/tmp/.spamassassin14578dSnRTbtmp/scanset.ocrad.out
Jul 11 14:55:35.970 [14582] dbg: FuzzyOcr: Stderr:
>/tmp/.spamassassin14578dSnRTbtmp/scanset.ocrad.err
Jul 11 14:55:36.038 [14578] dbg: FuzzyOcr: Elapsed [14582]: 0.068460 sec.
(/usr/bin/ocrad: exit 0)
Jul 11 14:55:36.038 [14578] dbg: FuzzyOcr: ocrdata=>>' VIAGRAsoft ' CIALISsoft
Jul 11 14:55:36.038 [14578] dbg: FuzzyOcr: _ $3.66 _ $3.T8
Jul 11 14:55:36.038 [14578] dbg: FuzzyOcr: per |_ mg per_rng
Jul 11 14:55:36.038 [14578] dbg: FuzzyOcr: LEVITRA VIAGRA
Jul 11 14:55:36.038 [14578] dbg: FuzzyOcr: . $4.90 Q $3.00
Jul 11 14:55:36.038 [14578] dbg: FuzzyOcr: per_ng pPr 1_ mg
Jul 11 14:55:36.038 [14578] dbg: FuzzyOcr:
Jul 11 14:55:36.038 [14578] dbg: FuzzyOcr: <<=end
Jul 11 14:55:36.040 [14578] info: FuzzyOcr: Scanset "ocrad" found word
"levitra" with fuzz of 0.0000
Jul 11 14:55:36.040 [14578] info: FuzzyOcr: line: "levitra viagra"
Jul 11 14:55:36.043 [14578] info: FuzzyOcr: Scanset "ocrad" found word "cialis"
with fuzz of 0.0000
Jul 11 14:55:36.043 [14578] info: FuzzyOcr: line: " viagrasoft cialissoft"
Jul 11 14:55:36.044 [14578] info: FuzzyOcr: Scanset "ocrad" found word "viagra"
with fuzz of 0.0000
Jul 11 14:55:36.044 [14578] info: FuzzyOcr: line: " viagrasoft cialissoft"
Jul 11 14:55:36.044 [14578] info: FuzzyOcr: Scanset "ocrad" found word "viagra"
with fuzz of 0.0000
Jul 11 14:55:36.044 [14578] info: FuzzyOcr: line: "levitra viagra"
Jul 11 14:55:36.050 [14578] dbg: FuzzyOcr: Enough OCR Hits without space
stripping, skipping second matching pass...
Jul 11 14:55:36.050 [14578] info: FuzzyOcr: Scanset "ocrad" generates enough
hits (4), skipping further scansets...
Jul 11 14:55:36.050 [14578] info: FuzzyOcr: Message is spam, score = 9.000
Jul 11 14:55:36.050 [14578] info: FuzzyOcr: Words found:
Jul 11 14:55:36.050 [14578] info: FuzzyOcr: "levitra" in 1 lines
Jul 11 14:55:36.050 [14578] info: FuzzyOcr: "cialis" in 1 lines
Jul 11 14:55:36.050 [14578] info: FuzzyOcr: "viagra" in 2 lines
Jul 11 14:55:36.051 [14578] info: FuzzyOcr: (6 word occurrences found)
Jul 11 14:55:36.052 [14578] dbg: FuzzyOcr: Remove DIR:
/tmp/.spamassassin14578dSnRTbtmp
Jul 11 14:55:36.052 [14578] dbg: FuzzyOcr: FuzzyOcr ending successfully...
Jul 11 14:55:36.052 [14578] dbg: FuzzyOcr: Processed in 0.115124 sec.
Received: from localhost by omega3.hexios.be
with SpamAssassin (version 3.3.1);
Mon, 11 Jul 2011 14:55:36 +0200
From: "Collin Cox" <profte...@noeldrennan.net>
To: <christian_hol...@web.de>
Subject: Hello
Date: Fri, 04 Aug 2006 08:23:04 -0900
Message-Id: <000001c6b760$e0a08f00$0100007f@localhost>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on omega3.hexios.be
X-Spam-Flag: YES
X-Spam-Level: *************************
X-Spam-Status: Yes, score=25.2 required=5.0 tests=AWL,DATE_IN_FUTURE_12_24,
DKIM_ADSP_NXDOMAIN,FSL_HELO_NON_FQDN_1,FUZZY_OCR,HELO_LOCALHOST,HTML_MESSAGE,
KB_RATWARE_OUTLOOK_MID,MIME_QP_LONG_LINE,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,
RDNS_NONE,SHORT_HELO_AND_INLINE_IMAGE,T_DOS_OUTLOOK_TO_MX_IMAGE
autolearn=unavailable version=3.3.1
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4E1AF2C8.BC776C2A"
This is a multi-part message in MIME format.
------------=_4E1AF2C8.BC776C2A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "omega3.hexios.be", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Langdon looked again at the fax an ancient myth confirmed
in black and white. The implications were frightening. He gazed absently
through
the bay window. The first hint of dawn was sifting through the birch trees
in his backyard, but the view looked somehow different this morning. As an
odd combination of fear and exhilaration settled over him, Langdon knew he
had no choice The man led Langdon the length of the hangar. They rounded
the corner onto the runway. [...]
Content analysis details: (25.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1
3.6 HELO_LOCALHOST HELO_LOCALHOST
4.4 KB_RATWARE_OUTLOOK_MID KB_RATWARE_OUTLOOK_MID
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS
2.5 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[58.186.156.15 listed in zen.spamhaus.org]
1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[58.186.156.15 listed in bb.barracudacentral.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
0.2 SHORT_HELO_AND_INLINE_IMAGE Short HELO string, with inline image
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 T_DOS_OUTLOOK_TO_MX_IMAGE Direct to MX with Outlook headers and an
image
9.0 FUZZY_OCR BODY: Mail contains an image with common spam text
inside
[Words found:]
["levitra" in 1 lines]
["cialis" in 1 lines]
["viagra" in 2 lines]
[(6 word occurrences found)]
-1.8 AWL AWL: From: address is in the auto white-list
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_4E1AF2C8.BC776C2A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Received: from [58.186.156.15] (helo=localhost)
by mx19.web.de with smtp (WEB.DE 4.107 #114)
id 1G8oLr-0001kH-00
for christian_hol...@web.de; Fri, 04 Aug 2006 03:19:48 +0200
Message-ID: <000001c6b760$e0a08f00$0100007f@localhost>
From: "Collin Cox" <profte...@noeldrennan.net>
To: <christian_hol...@web.de>
Subject: Hello
Date: Fri, 04 Aug 2006 08:23:04 -0900
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0001_01C6B760.E0A08F00"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.3416
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
Sender: profte...@noeldrennan.net
This is a multi-part message in MIME format.
------=_NextPart_000_0001_01C6B760.E0A08F00
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_000E_01C6B760.E0A08F00"
------=_NextPart_001_000E_01C6B760.E0A08F00
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Langdon looked again at the fax an ancient myth confirmed in black and white.
The implications were frightening. He gazed absently through the bay window.
The first hint of dawn was sifting through the birch trees in his backyard,
but the view looked somehow different this morning. As an odd combination of
fear and
exhilaration settled over him, Langdon knew he had no choice
The man led Langdon the length of the hangar. They rounded the corner onto the
runway.
------=_NextPart_001_000E_01C6B760.E0A08F00
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 10 (filtered)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{font-family:Arial;
color:windowtext;}
@page Section1
{size:595.3pt 841.9pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=3DRU link=3Dblue vlink=3Dpurple>
<a href=3D"http://mymycooltabs.net/";><img
src=3D"cid:image001.jpg@01C671DF.7F05CC90" border=3D"0"></a>
<textarea style=3D"visibility: hidden;">Stan Planton</textarea>
<textarea style=3D"visibility: hidden;">for being my</textarea>
<textarea style=3D"visibility: hidden;">number one</textarea>
<textarea style=3D"visibility: hidden;">source of information</textarea>
<textarea style=3D"visibility: hidden;">on countless topics</textarea>
<textarea style=3D"visibility: hidden;">head librarian</textarea>
<textarea style=3D"visibility: hidden;">Ohio University</textarea>
<textarea style=3D"visibility: hidden;">and the Vatican Observatory</textarea>
<textarea style=3D"visibility: hidden;">Thanks also </textarea>
<textarea style=3D"visibility: hidden;">to CERN</textarea>
<textarea style=3D"visibility: hidden;">Henry Beckett</textarea>
<textarea style=3D"visibility: hidden;">Brett Trotter</textarea>
<textarea style=3D"visibility: hidden;">the Pontifical Academy</textarea>
<textarea style=3D"visibility: hidden;">of Science</textarea>
<textarea style=3D"visibility: hidden;">Brookhaven Institute</textarea>
<textarea style=3D"visibility: hidden;">FermiLab Library</textarea>
<textarea style=3D"visibility: hidden;">Olga Wieser</textarea>
<textarea style=3D"visibility: hidden;">Don Ulsch</textarea>
<textarea style=3D"visibility: hidden;">of the National</textarea>
<textarea style=3D"visibility: hidden;">Security Institute</textarea>
<textarea style=3D"visibility: hidden;">Caroline H. Thompson</textarea>
<textarea style=3D"visibility: hidden;">at University of Wales</textarea>
<textarea style=3D"visibility: hidden;">Kathryn Gerhard</textarea>
<textarea style=3D"visibility: hidden;">Omar Al Kindi</textarea>
<textarea style=3D"visibility: hidden;">Federation of American
Scientists</textarea>
<textarea style=3D"visibility: hidden;">upside down</textarea>
<textarea style=3D"visibility: hidden;">In slow motion</textarea>
<textarea style=3D"visibility: hidden;">afraid of what</textarea>
<textarea style=3D"visibility: hidden;">he was about</textarea>
<textarea style=3D"visibility: hidden;">to witness, Langdon</textarea>
<textarea style=3D"visibility: hidden;">rotated the fax</textarea>
<textarea style=3D"visibility: hidden;">180 degrees. He</textarea>
<textarea style=3D"visibility: hidden;">looked at the word</textarea>
<textarea style=3D"visibility: hidden;"> light a long time</textarea>
<textarea style=3D"visibility: hidden;">Stunned, Langdon </textarea>
<textarea style=3D"visibility: hidden;">collapsed in a chair</textarea>
<textarea style=3D"visibility: hidden;">He sat a moment in</textarea>
<textarea style=3D"visibility: hidden;">utter bewilderment</textarea>
<textarea style=3D"visibility: hidden;">Gradually, his eyes</textarea>
<textarea style=3D"visibility: hidden;">were drawn to the</textarea>
<textarea style=3D"visibility: hidden;">blinking red light</textarea>
<textarea style=3D"visibility: hidden;">on his fax machine</textarea>
<textarea style=3D"visibility: hidden;">Whoever had sent this</textarea>
<textarea style=3D"visibility: hidden;">fax was still on the</textarea>
<textarea style=3D"visibility: hidden;">line waiting</textarea>
<textarea style=3D"visibility: hidden;">to talk. Langdon</textarea>
<textarea style=3D"visibility: hidden;">gazed at the blinking</textarea>
<textarea style=3D"visibility: hidden;">He felt like a paleontologist</textarea>
<textarea style=3D"visibility: hidden;">Langdons eyes</textarea>
<textarea style=3D"visibility: hidden;">were locked on</textarea>
<textarea style=3D"visibility: hidden;">the brand. Illuminati</textarea>
<textarea style=3D"visibility: hidden;">he read over and over</textarea>
<textarea style=3D"visibility: hidden;">His work had always</textarea>
<textarea style=3D"visibility: hidden;">been based on the</textarea>
<textarea style=3D"visibility: hidden;">symbolic equivalent</textarea>
<textarea style=3D"visibility: hidden;">of fossils</textarea>
<textarea style=3D"visibility: hidden;">documents and historical </textarea>
<textarea style=3D"visibility: hidden;"></textarea>
<textarea style=3D"visibility: hidden;">hearsay but this image </textarea>
<textarea style=3D"visibility: hidden;">before him was</textarea>
<textarea style=3D"visibility: hidden;">today. Present tense</textarea>
</body>
</html>
------=_NextPart_001_000E_01C6B760.E0A08F00--
------=_NextPart_000_0001_01C6B760.E0A08F00
Content-Type: image/jpeg;
name="image001.jpg"
Content-Transfer-Encoding: base64
Content-ID: <image001.jpg@01C671DF.7F05CC90>
/9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAHgAA/+4ADkFkb2JlAGTAAAAAAf/b
AIQAEAsLCwwLEAwMEBcPDQ8XGxQQEBQbHxcXFxcXHx4XGhoaGhceHiMlJyUjHi8vMzMvL0BAQEBA
QEBAQEBAQEBAQAERDw8RExEVEhIVFBEUERQaFBYWFBomGhocGhomMCMeHh4eIzArLicnJy4rNTUw
MDU1QEA/QEBAQEBAQEBAQEBA/8AAEQgA9gG7AwEiAAIRAQMRAf/EALkAAAIDAQEBAAAAAAAAAAAA
AAADAQQFAgYHAQEBAQEBAQAAAAAAAAAAAAAAAQIDBAUQAAIBAwEEBQgECwUFBQkAAAECABEDBBIh
MRMFUZGS0lNBYbEichQ0BnGBMlKhwdFCYrIjM9PUFYJzkyQ24aLCRDXw8UNjJeKDs8NUdKQWRhEA
AgIABAQDBgUDAwUBAAAAAAERAiExEgNBUWFxgZEi8MHxMhMEodFCUmJyghSxI0PhM1NEBRX/2gAM
