On Tuesday 18 November 2003 11:49 pm, Greg Meyer wrote:
> On Tuesday 18 November 2003 10:49 pm, Dennis Myers wrote:
> > How about 18.6?
>
> Ha!  35.9.  That has got to be a world record.
Yes, hits=85.4 
required=8.0 
tests=ALL_CAP_PORN,
BIZ_TLD, 
DATE_IN_PAST_03_06,
DATE_SPAMWARE_Y2K,
DNS_FROM_RFCI_DSN, 
FORGED_MUA_OUTLOOK,
FORGED_OUTLOOK_HTML,
FORGED_OUTLOOK_TAGS, 
FORGED_RCVD_NET_HELO,
FROM_HAS_MIXED_NUMS,
FROM_HAS_MIXED_NUMS3, 
HTML_IMAGE_ONLY_02,
HTML_MESSAGE,
MIME_HTML_NO_CHARSET,
MIME_HTML_ONLY, 
MIME_HTML_ONLY_MULTI,
MISSING_MIMEOLE,
RAZOR2_CF_RANGE_51_100, 
RAZOR2_CHECK,
RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_CBL,
RCVD_IN_DSBL, 
RCVD_IN_EASY,
RCVD_IN_NJABL,
RCVD_IN_NJABL_PROXY,
RCVD_IN_SORBS, 
RCVD_IN_SORBS_HTTP,
SORTED_RECIPS,
SUSPICIOUS_RECIPS, 
X_MSMAIL_PRIORITY_HIGH,
X_PRIORITY_HIGH,
X_SORBS_SOCKS


X-Spam-Report:
* 0.5 X_PRIORITY_HIGH Sent with 'X-Priority' set to high 
* 0.3 FROM_HAS_MIXED_NUMS From: contains numbers mixed in with letters 
* 2.0 FROM_HAS_MIXED_NUMS3 From: contains numbers mixed in with letters 
* 0.5 X_MSMAIL_PRIORITY_HIGH Sent with 'X-Msmail-Priority' set to high 
* 4.4 DATE_SPAMWARE_Y2K Date header uses unusual Y2K formatting
 * 0.7 ALL_CAP_PORN BODY: Possible porn - in ALL CAPS 
* 6.0 HTML_MESSAGE BODY: HTML included in message 
* 1.6 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence between 51 and 100 
* [cf: 100] 
* 6.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 
* 2.2 HTML_IMAGE_ONLY_02 BODY: HTML: images with 0-200 bytes of words
* 0.7 MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset 
* 0.8 BIZ_TLD URI: Contains a URL in the BIZ top-level domain 
* 5.0 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 
* 0.7 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date 
* 3.0 FORGED_RCVD_NET_HELO Host HELO'd using the wrong IP network 
* 3.0 SUSPICIOUS_RECIPS Similar addresses in recipient list 
* 4.3 SORTED_RECIPS Recipient list is sorted by address 
* 1.1 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server * 
[62.57.96.223 listed in dnsbl.sorbs.net] 
* 7.0 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org 
* [<http://dsbl.org/listing?ip=62.57.96.223>] 
* 7.0 RCVD_IN_EASY RBL: Received via EASYed relay, see 
http://blackholes.easynet.nl 
* [62.57.96.223 listed in blackholes.easynet.nl] 
* 7.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * 
[Blocked - see <http://www.spamcop.net/bl.shtml?62.57.96.223>] 
* 1.0 X_SORBS_SOCKS RBL: DNSBL: sender ip address Confirmed Open Socks Proxy * 
[62.57.96.223 listed in dnsbl.sorbs.net] 
* 1.1 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy * [62.57.96.223 
listed in dnsbl.njabl.org] 
* 6.0 RCVD_IN_SORBS RBL: Received via a relay in dnsbl.sorbs.net * 
[62.57.96.223 listed in dnsbl.sorbs.net] 
* 1.4 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-ignorant.org 
* 0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org * 
[62.57.96.223 listed in dnsbl.njabl.org] 
* 6.0 RCVD_IN_CBL RBL: DNSBL: sender has sent spam to spamtraps * 
[62.57.96.223 listed in cbl.abuseat.org] 
* 1.2 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 
* 1.1 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 
* 1.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format 
* 1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts 
* 1.6 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

-- 
Bryan Phinney
Software Test Engineer


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to