Your message escaped the spam filter, because of the name change. The "May be forged" warning means that the Cornell server that runs the list wasn't able to verify that your e-mail really came from where it claimed to come from. I think it means that a reverse lookup on the IP address of the server that sent it produced no result. That's not unusual, unfortunately, especially when you're using a major hosting company for your mail.
The "BODY" hit is a regular expression, but I don't have time at this very moment to figure out what it does. Spamassassin uses a bunch of regular expressions to detect patterns that tend to identify spam. Here's what it attached to today's message: X-Spam-Status: No, hits=2 required=5 tests=MAY_BE_FORGED,FROM_ENDS_IN_NUMS,SUPERLONG_LINE I suspect that the regular expression detects line lengths. That might be a formatting weirdness. It still suspects a little because of the address that ends in a number, which is a common spammer thing. Nick > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On > Behalf Of Jim Sharkey > Sent: Tuesday, March 05, 2002 11:54 AM > To: Brin-L > Subject: RE: Spam filtering... > > > > Nick Arnett wrote: > >I was scanning my caught-spam file to see what I've been missing. > >Not much, but one of our list members is triggering it every time: > >SPAM: -------------------- Start SpamAssassin results > > >SPAM: Content analysis details: (6.9 hits, 5 required) > >SPAM: Hit! (0.5 points) 'Received:' has 'may be forged' warning > >SPAM: Hit! (1.6 points) From: ends in numbers > >SPAM: Hit! (0.8 points) BODY: /^[^<]{199,}$/m > >SPAM: Hit! (4 points) 'From:' address also used as sender's real > >name > > I can honestly say I have no idea any of this means. My Received > "may be forged?" I get a hit because my name ends in numbers? > And the last bit I don't understand at all. > > >The culprit is Jim Sharkey. I offer this not to criticize Jim, but > >to let him and everyone else know that if they have the same > >attributes, anybody using Spamassassin will never see their e-mails. > > I've fixed my "From" name problem recently. At least, I htought > I did; if someone can pass that on to Nick, and ask him to > confirm that, I'd appreciate it. Man, and I thought people were > just ignoring me. :-) > > Jim > > <hr>
