On Mon, June 16, 2008 02:55, John Hardin wrote:

> They *did not* hit for me. I've published one of the messages here:
> http://www.impsec.org/~jhardin/atm_spam_01.txt

 pts rule name              description
---- ---------------------- -------------------------------------------------
 1.7 FH_HOST_EQ_PACBELL_D   Host is pacbell.net dsl
 1.0 HK_BADNAME             From-name is empty or contains no small characters
 0.5 FREEMAIL_FROM          From-address is freemail domain
 2.1 SUBJ_ALL_CAPS          Subject is all capitals
 2.5 BADRELAY               Relay looks like dynamic/dialup/bot
 2.0 FREEMAIL_REPLYTO       Different freemail address found in Reply-To or Body
                             than From
 0.6 US_DOLLARS_3           BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
 0.0 BAYES_50               BODY: Bayesian spam probability is 40 to 60%
                            [score: 0.5000]
 1.5 UPPERCASE_75_100       message body is 75-100% uppercase
 0.1 RDNS_DYNAMIC           Delivered to trusted network by host with
                            dynamic-looking rDNS
 2.0 HK_MUCHMONEY           Message refers to hundreds of thousands or millions
 0.5 FREEMAIL_FROM_D2       Freemail ending with 1-2 digits
 4.0 HK_SCAM                Looks like scam
 1.3 SAGREY                 Adds score to spam from first-time senders


Benny Pedersen
Need more webspace ? http://www.servage.net/?coupon=cust37098

Reply via email to