On Dienstag, 4. April 2006 09:23 Michael Monnerie wrote:
> Hi, I got feedback today that they use "Mass Mailer" to send their
> e-mails. So it's really a forged OE Mail. I told them to use
> something else, otherwise they won't be able to contact a lot of
> customers...

I received another e-mail from them, marked as SPAM. I believe it's too 
strong to give a total of 5.8 points for FORGED_.*OUTLOOK.* rules, as 
they are similar.

X-Spam-Status: Yes, hits=6.132 tagged_above=-999 required=5
 tests=FORGED_MUA_OUTLOOK=3.36, FORGED_OUTLOOK_HTML=2.514,
 HTML_FONT_BIG=0.256, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.001

Mass_checks on my corpus says:
MSECS    SPAM%     HAM%     S/O    RANK   SCORE  NAME
0.679   0.9814   0.2599    0.791   0.57    3.36  FORGED_MUA_OUTLOOK
0.557   0.8144   0.2021    0.801   0.56    3.25  FORGED_OUTLOOK_HTML

It looks like most e-mails hit both rules, or am I wrong?

mfg zmi
-- 
// Michael Monnerie, Ing.BSc  ---   it-management Michael Monnerie
// http://zmi.at           Tel: 0660/4156531          Linux 2.6.11
// PGP Key:   "lynx -source http://zmi.at/zmi2.asc | gpg --import"
// Fingerprint: EB93 ED8A 1DCD BB6C F952  F7F4 3911 B933 7054 5879
// Keyserver: www.keyserver.net                 Key-ID: 0x70545879

Attachment: pgp9XEriFoAbJ.pgp
Description: PGP signature

Reply via email to