hi all,
 
    The below message is that amavisd sent to admin, said:  "(11.6 points, 98.0 required)"
why it notice me that is a spam even the points didn't meet the requirement ?
 
thx a lot
 
Ming
 
 
 
----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, June 08, 2004 6:58 AM
Subject: SPAM FROM <[EMAIL PROTECTED]>


Unsolicited bulk email from:
   [EMAIL PROTECTED]
Subject:

According to the 'Received:' trace, the message originated at:
   haha-pc.mshome.net  (HELO hahapc) (192.168.0.1)

The message WILL BE delivered to:
<[EMAIL PROTECTED]>

The message has been quarantined as:

/var/amavis/quarantine/spam-971d24e6af3ea79b4c6a53ddee5614a4-20040607-225852
-01484-01.gz

SpamAssassin report:
Spam detection software, running on the system "p4.haha.com", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  ------=_NextPart_001_0597_01C44CE8.B61E28D0
  ------=_NextPart_001_0597_01C44CE8.B61E28D0 3 [EMAIL PROTECTED] I6 o"`±uq
  ------=_NextPart_001_0597_01C44CE8.B61E28D0-- Return-Path:
  Delivered-To: [EMAIL PROTECTED] Received: (qmail 73352 invoked from
  network); 7 Jun 2004 00:23:56 -0000 Received: from
  pdf6ac5.nigtnt01.ap.so-net.ne.jp (202.223.106.197) Return-Path:
  Received: from smtp9.nix.paypal.com (smtp3.nix.paypal.com
  [202.223.106.197]) Received: from notify1.nix.paypal.com
  (notify3.nix.paypal.com [71.160.188.31]) Received: (qmail 18810 invoked
  by uid 559); Mon, 07 Jun 2004 07:05:09 +0600 Message-Id:
  <[EMAIL PROTECTED]> X-country: US X-language: en_US
  MIME-Version: 1.0 X-Mailer: Microsoft Office Outlook, Build 11.0.5510
  From: "Compare mortgage options" To: Email Subject: No cost service to
  home owners X-Spam-Checker-Version: SpamAssassin 2.60-spambr_20030926a
  on X-Spam-Level: X-Spam-Status: No, hits=-5.9 required=5.0
  tests=AWL,NO_REAL_NAME autolearn=no X-UIDL: fB@"!)+h"!#+""!Y$m!!
  ------=_NextPart_000_00JE_00B0334VF_06D.490I61Y0
  ------=_NextPart_000_00HD_05N7395NB_00E.902N05E0 Your mailer do not
  support HTML messages. Switch to a better mailer. -----BEGIN PGP
  SIGNATURE----- Version: GnuPG v1.2.3 (MingW32)
  ^?@"U"‥~?·COPa"??i!Rc<
  ,NY.u?3.Syz&ab﹐"~Y¥|μnAAh°O-----END PGP SIGNATURE-----
  ------=_NextPart_000_00HD_05N7395NB_00E.902N05E0 [...]

Content analysis details:   (11.6 points, 98.0 required)

 pts rule name              description
---- ---------------------- ------------------------------------------------
--
 2.8 STRONG_BUY             BODY: Tells you about a strong buy
 0.7 ALL_NATURAL            BODY: Spam is 100% natural?!
 0.7 NO_COST                BODY: No such thing as a free lunch (3)
 0.1 LOW_PRICE              BODY: Lowest Price
 0.1 HTML_FONTCOLOR_UNSAFE  BODY: HTML font color not in safe 6x6x6 palette
 0.7 HTML_20_30             BODY: Message is 20% to 30% HTML
 0.5 HTML_SHOUTING7         BODY: HTML has very strong "shouting" markup
 1.1 HTML_LINK_PUSH_HERE    BODY: HTML link text says "push here" or similar
 0.1 HTML_FONTCOLOR_RED     BODY: HTML font color is red
 0.1 HTML_FONTCOLOR_UNKNOWN BODY: HTML font color is unknown to us
 0.3 HTML_FONT_BIG          BODY: HTML has a big font
 0.4 HTML_TAG_BALANCE_BODY  BODY: HTML has unbalanced "body" tags
 0.1 HTML_FONTCOLOR_BLUE    BODY: HTML font color is blue
 0.7 HTML_TAG_BALANCE_HTML  BODY: HTML has unbalanced "html" tags
 0.2 HTML_MESSAGE           BODY: HTML included in message
 0.1 HTML_FONTCOLOR_GREEN   BODY: HTML font color is green
 0.7 BIZ_TLD                URI: Contains a URL in the BIZ top-level domain
 0.5 MAILTO_TO_SPAM_ADDR    URI: Includes a link to a likely spammer email
 0.8 DATE_IN_PAST_06_12     Date: is 6 to 12 hours before Received: date
 1.1 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format

------------------------- BEGIN HEADERS -----------------------------
Return-Path: <[EMAIL PROTECTED]>
Received: (qmail 4170 invoked from network); 7 Jun 2004 22:58:47 -0000
Received: from haha-pc.mshome.net (HELO hahapc) (192.168.0.1)
  by 192.168.0.172 with SMTP; 7 Jun 2004 22:58:47 -0000
Message-ID: <[EMAIL PROTECTED]>
From: "haha" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject:
Date: Mon, 7 Jun 2004 23:39:44 +0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0596_01C44CE8.B61E28D0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1409
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
-------------------------- END HEADERS ------------------------------

Reply via email to