Yes, well this example was below my 6.3 threshold but
if he replies to some messages or forwards some the
score goes up and the messages gets labeled as SPAM.
If it weren't for the wrongly identified markers like
FORGED_MUA_OUTLOOK and MISSING_OUTLOOK_NAME the rating
would be lower.
--ezsra


--- Ryan Moore <[EMAIL PROTECTED]> wrote:
> Scanning that same message I only got 0.5 points:
> 
> X-Spam-Status: No, hits=0.5 required=5.0
> tests=BAYES_50,DNS_FROM_RFCI_DSN,
>          HTML_70_80,HTML_MESSAGE autolearn=no
> version=2.61
> X-Spam-Report:
>   *  0.1 HTML_MESSAGE BODY: HTML included in message
>   *  0.0 BAYES_50 BODY: Bayesian spam probability is
> 50 to 56%
>   *      [score: 0.5003]
>   *  0.1 HTML_70_80 BODY: Message is 70% to 80% HTML
>   *  0.3 DNS_FROM_RFCI_DSN RBL: From: sender listed
> in
>           dsn.rfc-ignorant.org
> 
> But I am also still using 2.61.
> 
> Ryan Moore
> ----------
> Perigee.net Corporation
> 704-849-8355 (sales)
> 704-849-8017 (tech)
> www.perigee.net
> 
> 
> 
> Ezsra McDonald wrote:
> > I have legitamate messages from my boss' mail
> client
> > getting marked as SPAM. I have seen others
> reference
> > simialr problems but no solutions were posted. I
> > upgraded to the lates version of SA ($VERSION =
> > "2.63") and he still gets tagged. I have attached
> an
> > example text fomr of one of his messages.
> > 
> > In a second message he sent me which was marked
> "high
> > priority" I found these headers:
> > 
> > X-Spam-Status: Yes, hits=9.2 tagged_above=3.5
> > required=6.3 tests=BUGGY_CGI,       
> > FORGED_MUA_OUTLOOK, MAILTO_TO_SPAM_ADDR,
> > MISSING_OUTLOOK_NAME,        X_PRIORITY_HIGH
> > 
> > 
> > I don't understand what BUGGY_CGI is. All I saw
> were a
> > few e-mail addresses and a URL to our website. No
> CGI
> > or code of any kind.
> > 
> > I know the main issue is that he recently upgraded
> his
> > Outlook to Outlook 2003.
> > 
> > 
> > 
> > 
> > __________________________________
> > Do you Yahoo!?
> > Yahoo! Mail SpamGuard - Read only the mail you
> want.
> > http://antispam.yahoo.com/tools
> > 
> > 
> >
>
------------------------------------------------------------------------
> > 
> >>From [EMAIL PROTECTED] Thu Feb 19 12:53:34 2004
> > Return-Path: <[EMAIL PROTECTED]>
> > Received: from heracles ([unix socket]) by
> heracles (Cyrus v2.1.9) with
> >     LMTP; Thu, 19 Feb 2004 12:53:34 -0600
> > X-Sieve: CMU Sieve 2.2
> > Return-Path: <[EMAIL PROTECTED]>
> > Received: from smtp-gateway.myhost.com
> (thanatos.myhost.com [172.25.14.167]) by
> >     smtp2.myhost.com (Postfix) with ESMTP id
> C0081D83F9 for <[EMAIL PROTECTED]>; Thu,
> >     19 Feb 2004 12:53:31 -0600 (CST)
> > Received: from localhost (localhost [127.0.0.1])
> by smtp-gateway.myhost.com
> >     (One4All) with ESMTP id A11724A22 for
> <[EMAIL PROTECTED]>; Thu, 19 Feb
> >     2004 12:53:19 -0600 (CST)
> > Received: from smtp-gateway.myhost.com
> ([127.0.0.1]) by localhost (thanatos
> >     [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
> id 29237-06 for
> >     <[EMAIL PROTECTED]>; Thu, 19 Feb 2004 12:53:15
> -0600 (CST)
> > Received: from DD2CQJ11 (poseidon.myhost.com
> [172.25.14.218]) by
> >     smtp-gateway.myhost.com (One4All) with ESMTP id
> C5DC74A1C for
> >     <[EMAIL PROTECTED]>; Thu, 19 Feb 2004 12:53:09
> -0600 (CST)
> > From: "Richard Logan" <[EMAIL PROTECTED]>
> > To: "'Phillip Van Dyke'" <[EMAIL PROTECTED]>
> > Subject: TEST
> > Date: Thu, 19 Feb 2004 12:52:41 -0600
> > MIME-Version: 1.0
> > Content-Type: multipart/alternative;
> boundary="----=_NextPart_000_0081_01C3F6E7.432C2270"
> > X-Mailer: Microsoft Office Outlook, Build
> 11.0.5510
> > X-MimeOLE: Produced By Microsoft MimeOLE
> V6.00.2800.1165
> > Thread-Index: AcP3GY11umIIBRO+SV6deiIc1a+KQg==
> > Message-Id:
> <[EMAIL PROTECTED]>
> > X-Virus-Scanned: by amavisd-new at myhost.com
> > X-Spam-Status: No, hits=4.7 tagged_above=3.5
> required=6.3
> >     tests=FORGED_MUA_OUTLOOK, HTML_70_80,
> HTML_MESSAGE, HTML_SHOUTING3,
> >     MAILTO_LINK, MISSING_OUTLOOK_NAME
> > X-Spam-Level: *****
> > X-Evolution-Source: imap://[EMAIL PROTECTED]/
> > 
> > This is a multi-part message in MIME format.
> > 
> > ------=_NextPart_000_0081_01C3F6E7.432C2270
> > Content-Type: text/plain; charset="us-ascii"
> > Content-Transfer-Encoding: 8bit
> > 
> > TEST
> > 
> >  
> > 
> > ***********************
> > Richard Logan
> > 
> > General Manager
> > 
> > One4All - a service of the Steel and Pipe Sales,
> Inc.
> > 
> > www.One4All.org 
> > 
> > 
> > 223.296.5275 (Phone)
> > 
> > 492-914-5803 (Cell)
> > 
> > 223.296.5563 (Fax)
> > [EMAIL PROTECTED] (email)
> > 
> > *********************** 
> > 
> >  
> > 
> > 
> > ------=_NextPart_000_0081_01C3F6E7.432C2270
> > Content-Type: text/html; charset="us-ascii"
> > Content-Transfer-Encoding: 8bit
> > 
> > <html>
> > 
> > <head>
> > <META HTTP-EQUIV="Content-Type"
> CONTENT="text/html; charset=us-ascii">
> > <meta name=Generator content="Microsoft Word 11
> (filtered)">
> > 
> > <style>
> > <!--
> >  /* Style Definitions */
> >  p.MsoNormal, li.MsoNormal, div.MsoNormal
> >     {margin:0in;
> >     margin-bottom:.0001pt;
> >     font-size:12.0pt;
> >     font-family:"Times New Roman";}
> > a:link, span.MsoHyperlink
> >     {color:blue;
> >     text-decoration:underline;}
> > a:visited, span.MsoHyperlinkFollowed
> >     {color:purple;
> >     text-decoration:underline;}
> > span.EmailStyle17
> >     {font-family:Arial;
> >     color:windowtext;}
> > @page Section1
> >     {size:8.5in 11.0in;
> >     margin:1.0in 1.25in 1.0in 1.25in;}
> > div.Section1
> >     {page:Section1;}
> > -->
> > </style>
> > 
> > </head>
> > 
> > <body lang=EN-US link=blue vlink=purple>
> > 
> > <div class=Section1>
> > 
> > <p class=MsoNormal><font size=2 face=Arial><span
> style='font-size:10.0pt;
> 
=== message truncated ===


__________________________________
Do you Yahoo!?
Yahoo! Mail SpamGuard - Read only the mail you want.
http://antispam.yahoo.com/tools

Reply via email to