You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris Lear <ch...@laculine.com> on 2007/01/08 15:33:38 UTC

Re: Easyjet e-mail scoring very high

* Chris Lear wrote (01/12/06 16:57):
> * Adam Stephens wrote (01/12/06 16:10):
>> Chris Lear wrote:
>>> * Loren Wilton wrote (01/12/06 14:54):
>>>   
>>>>> The html contains this sort of thing:
>>>>> http://www&#46;easyjet&#46;com/EN/Members/
>>>>>
>>>>> Which looks like the culprit. In fact, every full stop in the html is
>>>>> represented as &#46; for some reason.
>>>>>
>>>>> Still wondering though... how do you solve a problem like EasyJet?
>>>>>       
>>>> Sure looks like spam to me.  ;-)
>>>>
>>>> Which also looks like just about every airline message I've seen from any 
>>>> airline.  :-(  Apparently they hired spammers to design their marketing 
>>>> campain mail.
>>>>
>>>> You could try sending to mostmaster or whatever at whichever marketing 
>>>> company is really sending that mail and see if you can get any attention 
>>>> from them.  Probably not, but it might be worth trying.
>>>>     
>>>
>>> The trouble is, it's not marketing. It's a confirmation of a flight
>>> booking, which I paid for. The airline doesn't issue tickets. So it's
>>> something I genuinely want in my inbox. It looks like it's generated
>>> directly by the easyjet.com web server.
>>>   
>> 
>> I had some complaints about that this week; it's obviously a new issue, 
>> and it looks like it only applies to the ticket confirmations. Since 
>> people really need these booking confirmations I've whitelisted it - 
>> using a whitelist_from_rcvd rule seems to catch the booking 
>> confirmations only as the marketing material is sent from a different 
>> machine.
> 
> Thanks for all the advice. I've reluctantly whitelisted them and written
> a polite message to postmaster@easyjet.com. It doesn't seem to have
> bounced, so maybe someone will read it. I'll let you know if I get a
> response.
> Meanwhile, I suppose this is something for others to be aware of if you
> run an mta that rejects on high SA scores (and have users that might
> want to fly EasyJet).

This thread is ancient now, but here's a followup: I never got a
response from Easyjet, but I did get (today) a replica of the original
e-mail. It's almost identical (same appalling html, still from
savvis.net, but from a different ip), but missing a chunk of advertising
(hotels, car rental, etc), and with some very slightly different wording
about hand luggage.

The new version hits these rules:

DNS_FROM_RFC_ABUSE,
FORGED_RCVD_HELO, [this is new]
HTML_FONT_FACE_BAD,
HTML_MESSAGE,
HTML_TINY_FONT,
MIME_HTML_MOSTLY,
SARE_OBFU_AMP2B,
SARE_SPEC_LEO_LINE03a,
USER_IN_WHITELIST [because I whitelisted them]

DNS_FROM_RFC_ABUSE
HTML_FONT_FACE_BAD
HTML_MESSAGE
HTML_TINY_FONT
MARKETING_PARTNERS [This has gone]
MIME_HTML_MOSTLY
MPART_ALT_DIFF [This has gone]
SARE_OBFU_AMP2B
SARE_SPEC_LEO_LINE03a

Chris