> Unfortunately, none of the 'spammed' emails I have seen give any useful
> indication as to what triggered it

Have you asked the email's recipient to send the mail tagged a spam back to
you ?
He need to send the full email as an attached file so that the email comes
with all of his header lines.
Here is an example of header lines extract from a spam email I received
after being processed by SpamAssassin:

-- cut here --
X-Spam-Prev-Subject: We cure any desease!
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on
X-Spam-Level: *******************
X-Spam-Status: Yes, score=20.0 required=4.0 tests=BAYES_99,DOMAIN_RATIO,
 URIBL_SBL,URIBL_WS_SURBL autolearn=no version=3.0.4
 *  3.2 DOMAIN_RATIO BODY: Message body mentions many internet domains
 *  0.0 HTML_90_100 BODY: Message is 90% to 100% HTML
 *  1.0 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
 *  1.0 HTML_MESSAGE BODY: HTML included in message
 *  3.0 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words
 *  0.1 MPART_ALT_DIFF BODY: HTML and text parts are different
 *  3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
 *      [score: 1.0000]
 *  0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
 *  1.0 URIBL_SBL Contains an URL listed in the SBL blocklist
 *      [URIs: labelpeck.info]
 *  2.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
 *      [URIs: labelpeck.info]
 *  1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
 *      [URIs: labelpeck.info]
 *  3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
 *      [URIs: labelpeck.info]

-- cut here --

You see the spam filter give explanation about what "scored" into his

Contribute to the SSL Effort. Visit http://www.overbyte.be/eng/ssl.html
Author of ICS (Internet Component Suite, freeware)
Author of MidWare (Multi-tier framework, freeware)

To unsubscribe or change your settings for TWSocket mailing list
please goto http://www.elists.org/mailman/listinfo/twsocket
Visit our website at http://www.overbyte.be

Reply via email to