http://bugzilla.spamassassin.org/show_bug.cgi?id=3576
------- Additional Comments From [EMAIL PROTECTED] 2004-07-08 04:16 -------
here one example of a tagged mail witch was tagged as invalid_charset_2, but I
expected only a invalid_chaset_1 hit for this mail:
Received: from pfx2.example.com (sg001168.intranet.example.com
[140.100.200.10]) by sv028081.exchange.example.com with SMTP (Microsoft
Exchange Internet Mail Service Version 5.5.2657.72)
id 3PVCBKYQ; Thu, 8 Jul 2004 13:11:26 +0200
Received: from localhost (localhost [127.0.0.1])
by pfx2.example.com (example Internal Mail-System) with ESMTP id
BC99612ED4
for <[EMAIL PROTECTED]>; Thu, 8 Jul 2004 13:11:27 +0200 (CEST)
Received: by pfx2.example.com (example Internal Mail-System, from userid 501)
id 6CB3812FBE; Thu, 8 Jul 2004 13:11:27 +0200 (CEST)
Received: from mail.example.com (extern.postfix.example.com [140.100.155.100])
by pfx2.example.com (example Internal Mail-System) with ESMTP id
5965512EC2
for <[EMAIL PROTECTED]>; Thu, 8 Jul 2004 13:11:27 +0200 (CEST)
Received: by mail.example.com (example Mail-System, from userid 501)
id 209582641; Thu, 8 Jul 2004 11:11:25 +0000 (UTC)
Received: from localhost by mail4.example.com
with SpamAssassin (2.63 2004-01-11);
Thu, 08 Jul 2004 13:11:24 +0200
From: "Royce Peterson" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: *****SPAM***** this is the best brindisi squalid
Date: Thu, 08 Jul 2004 13:19:15 +0200
Message-Id: <[EMAIL PROTECTED]>
X-Spam-DCC: xmailer: mail4 1192; Body=1 Fuz1=1 Fuz2=1
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
mail4.example.com
X-Spam-Level: *********************
X-Spam-Status: Yes, hits=21.8 required=6.3 tests=BAYES_99,
FORGED_RCVD_NET_HELO,HTML_50_60,HTML_FONT_BIG,HTML_FONT_INVISIBLE,
HTML_MESSAGE,HTML_TITLE_UNTITLED,INVALID_CHARSET_2,MIME_HTML_ONLY,
MIME_HTML_ONLY_MULTI,MSGID_FROM_MTA_SHORT,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_DSBL,RCVD_IN_NJABL,RCVD_IN_NJABL_PROXY,RCVD_IN_RFCI,
RCVD_IN_SORBS,RCVD_IN_SORBS_HTTP,RCVD_IN_SORBS_SOCKS autolearn=spam
version=2.63
X-Spam-Pyzor: Reported 0 times.
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_40ED2BDC.CB948519"
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.2-6; AVE: 6.26.0.3; VDF:
6.26.0.19; host: pfx2)
This is a multi-part message in MIME format.
------------=_40ED2BDC.CB948519
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Your Email was identified as SPAM and did not reached the recipient.
Please check for the reasons below.
Ihre Email ist als SPAM Mail identifiziert worden und wurde dem
Empfaenger nicht zugestellt. Die Begruendung finden Sie weiter unten.
Contact address: [EMAIL PROTECTED]
Content preview: Untitled Document Say goodbye to expensive Refills! We
are not retreating - we are advancing in another Direction. - General
Douglas MacArthur (1880-1964) R_X Warehouse Direct!
URI:http://Geraldine.tgoiwe.com/_55d958a932f5b91262baa654773c6a8e/
>>more info<< [...]=20
Content analysis details: (21.8 points, 6.3 required)
0.1 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_FONT_BIG BODY: HTML has a big font
5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_TITLE_UNTITLED BODY: HTML title contains "Untitled"
0.6 HTML_FONT_INVISIBLE BODY: HTML font color is same as background
0.1 HTML_50_60 BODY: Message is 50% to 60% HTML
1.0 INVALID_CHARSET_2 BODY: INVALID_CHARSET_2
3.0 MSGID_FROM_MTA_SHORT Message-Id was added by a relay
4.1 FORGED_RCVD_NET_HELO Host HELO'd using the wrong IP network
1.1 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
[210.205.152.10 listed in dnsbl.sorbs.net]
0.5 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[210.205.152.10 listed in dnsbl.njabl.org]
0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
[210.205.152.10 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
[210.205.152.10 listed in dnsbl.njabl.org]
1.2 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server
[210.205.152.10 listed in dnsbl.sorbs.net]
0.7 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[<http://dsbl.org/listing?ip=3D210.205.152.10=
>]
1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?210.205.152=
.10>]
0.1 RCVD_IN_RFCI RBL: Sent via a relay in ipwhois.rfc-ignorant=
.org
[$ has inaccurate or missing WHOIS data at th=
e]
[RIR]
1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME par=
ts
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_40ED2BDC.CB948519
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 7bit
Return-Path: <[EMAIL PROTECTED]>
Received: from 212.149.48.150 (unknown [210.205.152.10])
by mail.example.com (example Mail-System) with SMTP
id 78E95260B; Thu, 8 Jul 2004 13:11:11 +0200 (CEST)
Original-Encoded-Information-Types: multipart/alternative
Language: English
Disclose-Recipients: No
Reply-To: "Royce Peterson" <[EMAIL PROTECTED]>
From: "Royce Peterson" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: this is the best brindisi squalid
Date: Thu, 08 Jul 2004 13:19:15 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--613821744884439"
Message-Id: <[EMAIL PROTECTED]>
----613821744884439
Content-Type: text/html;
charset="iso-3846-0"
Content-Transfer-Encoding: 7Bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body bgcolor="#0099FF" text="#FFFFFF" link="#FFFFFF">
<p><font color="#FFFF33" size="4" face="Arial, Helvetica, sans-serif"></font>
<font face="Arial, Helvetica, sans-serif">Say goodbye to expensive Refills!
<br>
<font color="#0099FF">We are not retreating - we are advancing in another
Direction. - General Douglas MacArthur (1880-1964) </font></font></p>
<h2><font face="Arial, Helvetica, sans-serif">R_X Warehouse Direct!</font> </h2>
<p><font face="Arial, Helvetica, sans-serif"><a
href="http://Geraldine.tgoiwe.com/_55d958a932f5b91262baa654773c6a8e/";>>>mo
re
info<<</a></font></p>
<p><font color="#0099FF" face="Arial, Helvetica, sans-serif">Everyone is a
genius at least once a year; a real genius has his original ideas closer
together. - Georg Lichtenberg (1742-1799) <br><br>
If you were plowing a field which would you rather use? Two strong oxen or 1024
chickens? - Seymour Cray (1925-1996) father of supercomputing</font></p>
</body>
</html>
----613821744884439--
------------=_40ED2BDC.CB948519--
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
