On Tuesday 18 November 2003 10:27 pm, Greg Meyer wrote:
> I got an 18 point spam tonight.  Can anybody beat that?
 Yes, but with altered scoring:

Yes, hits=74.3 required=8.0 tests=DATE_SPAMWARE_Y2K, 
FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS, 
FORGED_RCVD_NET_HELO,FORGED_YAHOO_RCVD,GAPPY_SUBJECT,HTML_50_60, 
HTML_FONT_BIG,HTML_IMAGE_ONLY_06,HTML_MESSAGE,MIME_HTML_NO_CHARSET, 
MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MISSING_MIMEOLE, 
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_CBL,RCVD_IN_DSBL,RCVD_IN_EASY, 
RCVD_IN_JAPAN,RCVD_IN_NJABL,RCVD_IN_NJABL_PROXY,RCVD_IN_SORBS, 
RCVD_IN_SORBS_HTTP,X_SORBS_MISC,X_SORBS_SOCKS autolearn=no version=2.60


X-Spam-Report:
 * 1.3 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t * 4.4 
DATE_SPAMWARE_Y2K Date header uses unusual Y2K formatting * 1.7 
HTML_IMAGE_ONLY_06 BODY: HTML: images with 400-600 bytes of words * 6.0 
HTML_MESSAGE BODY: HTML included in message * 0.1 HTML_FONT_BIG BODY: HTML 
has a big font * 6.0 MIME_HTML_ONLY BODY: Message only has text/html MIME 
parts * 0.2 HTML_50_60 BODY: Message is 50% to 60% HTML * 0.7 
MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset * 3.0 
FORGED_RCVD_NET_HELO Host HELO'd using the wrong IP network * 0.5 
FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers * 1.1 
RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server * 
[203.193.165.73 listed in dnsbl.sorbs.net] * 1.1 RCVD_IN_NJABL_PROXY RBL: 
NJABL: sender is an open proxy * [203.193.165.73 listed in dnsbl.njabl.org] * 
1.0 X_SORBS_MISC RBL: DNSBL: sender is Confirmed Open Misc Proxy * 
[203.193.165.73 listed in dnsbl.sorbs.net] * 7.0 RCVD_IN_JAPAN RBL: Received 
from Japan * [219.180.103.207 listed in japan.blackholes.us] * 6.0 
RCVD_IN_SORBS RBL: Received via a relay in dnsbl.sorbs.net * [203.193.165.73 
listed in dnsbl.sorbs.net] * 0.1 RCVD_IN_NJABL RBL: Received via a relay in 
dnsbl.njabl.org * [203.193.165.73 listed in dnsbl.njabl.org] * 6.0 
RCVD_IN_CBL RBL: DNSBL: sender has sent spam to spamtraps * [203.193.165.73 
listed in cbl.abuseat.org] * 7.0 RCVD_IN_DSBL RBL: Received via a relay in 
list.dsbl.org * [<http://dsbl.org/listing?ip=203.193.165.73>] * 7.0 
RCVD_IN_EASY RBL: Received via EASYed relay, see http://blackholes.easynet.nl 
* [203.193.165.73 listed in blackholes.easynet.nl] * 7.0 
RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net * [Blocked 
- see <http://www.spamcop.net/bl.shtml?203.193.165.73>] * 1.0 X_SORBS_SOCKS 
RBL: DNSBL: sender ip address Confirmed Open Socks Proxy * [203.193.165.73 
listed in dnsbl.sorbs.net] * 1.2 MISSING_MIMEOLE Message has 
X-MSMail-Priority, but no X-MimeOLE * 1.1 FORGED_OUTLOOK_HTML Outlook can't 
send HTML message only * 1.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in 
this format * 1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html 
MIME parts * 1.6 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS 
Outlook

-- 
Bryan Phinney
Software Test Engineer


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to