Hi
In the mailheader below there is (unless I'm blind) nowhere a trace of
US-ASCII & 8Bit encoding. Nevertheless the airmax.cf ruleset has a hit
for 2 points. Could somebody please enlighten me why the airmax.cf
rule below still applies?
Thank you
Philipp
2.0 US_8BIT US-ASCII isn't an eight bit charset.
Received: by mx.xxxx.xx (XXXXXX, from userid 50001)
id 3F26F1564C; Wed, 9 Mar 2005 10:39:08 +0100 (CET)
Received: from localhost by mx.xxxx.xxx
with SpamAssassin (version 3.0.1);
Wed, 09 Mar 2005 10:39:08 +0100
From: "senderdomain.tld" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: *****SPAM(4.5)***** senderdomain.tld - Newsletter
Date: Wed, 09 Mar 2005 08:53:32 +0100
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on
SpamAssassin
X-Spam-Level: ****
X-Spam-Status: Yes, score=4.5 required=3.0 tests=BAYES_00,HTML_40_50,
HTML_MESSAGE,HTML_TITLE_EMPTY,URI_REDIRECTOR,US_8BIT,VOWEL_FROM_6,
VOWEL_TOCC_6,VOWEL_URI_6 autolearn=no version=3.0.1
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------=_422EC43C.EDCE4840"
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 09 Mar 2005 09:38:13.0710 (UTC)
FILETIME=[B6DFC6E0:01C5248B]
------------=_422EC43C.EDCE4840
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
------------=_422EC43C.EDCE4840
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 7bit
Received: from fw01a-qfe1.senderdomain.tld(fw01a-qfe1.senderdomain.tld
[ip.address])
by mx.xxxxx.xxx (xxxxxxx) with SMTP id C91821564C
for <[EMAIL PROTECTED]>; Wed, 9 Mar 2005 10:38:59 +0100 (CET)
Received: from mailhost by fw01a-qfe1.senderdomain.tld
via smtpd (for mx.xxxxxxx.xxx [ip.address]) with SMTP; 9 Mar
2005 09:38:59 UT
Received: from senderdomain.tld [ip.address] by senderdomain.tld with
ESMTP
(SMTPD32-7.07) id AB32ECB013A; Wed, 09 Mar 2005 08:52:18 +0100
Message-ID: <[EMAIL PROTECTED]>
Date: Wed, 09 Mar 2005 08:53:32 +0100
From: "senderdomain.tld" <[EMAIL PROTECTED]>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; de-DE; rv:1.4)
Gecko/20030619 Netscape/7.1 (ax)
X-Accept-Language: de-de, de
MIME-Version: 1.0
To: [EMAIL PROTECTED]
Subject: senderdomain.tld - Newsletter
Content-Type: multipart/alternative;
boundary="------------060907090407000502070702"
Precedence: bulk
Sender: [EMAIL PROTECTED]
--------------060907090407000502070702
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
--------------060907090407000502070702
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
--------------060907090407000502070702--
------------=_422EC43C.EDCE4840--
