> Unfortunately, none of the 'spammed' emails I have seen give any useful > indication as to what triggered it
Have you asked the email's recipient to send the mail tagged a spam back to you ? He need to send the full email as an attached file so that the email comes with all of his header lines. Here is an example of header lines extract from a spam email I received after being processed by SpamAssassin: -- cut here -- X-Spam-Prev-Subject: We cure any desease! X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on aspamsrv01.chrliege.be X-Spam-Level: ******************* X-Spam-Status: Yes, score=20.0 required=4.0 tests=BAYES_99,DOMAIN_RATIO, HTML_90_100,HTML_IMAGE_ONLY_08,HTML_MESSAGE,MIME_HTML_MOSTLY, MIME_QP_LONG_LINE,MPART_ALT_DIFF,URIBL_JP_SURBL,URIBL_OB_SURBL, URIBL_SBL,URIBL_WS_SURBL autolearn=no version=3.0.4 X-Spam-Report: * 3.2 DOMAIN_RATIO BODY: Message body mentions many internet domains * 0.0 HTML_90_100 BODY: Message is 90% to 100% HTML * 1.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME * 1.0 HTML_MESSAGE BODY: HTML included in message * 3.0 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words * 0.1 MPART_ALT_DIFF BODY: HTML and text parts are different * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars * 1.0 URIBL_SBL Contains an URL listed in the SBL blocklist * [URIs: labelpeck.info] * 2.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist * [URIs: labelpeck.info] * 1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: labelpeck.info] * 3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: labelpeck.info] -- cut here -- You see the spam filter give explanation about what "scored" into his filtering. Contribute to the SSL Effort. Visit http://www.overbyte.be/eng/ssl.html -- [EMAIL PROTECTED] Author of ICS (Internet Component Suite, freeware) Author of MidWare (Multi-tier framework, freeware) http://www.overbyte.be -- To unsubscribe or change your settings for TWSocket mailing list please goto http://www.elists.org/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
