You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Khalid Waheed <kh...@eim.ae> on 2004/10/18 09:27:59 UTC

URIBL score

Hi,

The original message and test result is given below,
I'm wondering how to improve the score of this message which is sure 
spam and listed in URIBL.

The score of the message is always 3.2 with or without bayes.

Thanks,

Khalid



-------------------------------------- Test
Result----------------------------------------------------------------

result: .  3 - 
HTML_IMAGE_ONLY_20,HTML_MESSAGE,MIME_HTML_ONLY,URIBL_SBL,URIBL_WS_SURBL
scantime=2.6,size=2838,mid=<0I...@reedaedtghdfdfedf>,autolearn=disabled



------------------------------------------------- Message
----------------------------------------------------

Return-path: <Ki...@attentiveprice.com>
....
Received: from attentiveprice.com ([66.63.174.195]) by 
dimail2.emirates.net.ae
(I&ES Mail Server 4.2) with SMTP id <0I...@dimail2.emirates.net.ae>
for khalidwa@emirates.net.ae (ORCPT khalidwa@emirates.net.ae); Mon,
18 Oct 2004 00:34:58 +0400 (GST)
Date: Sun, 17 Oct 2004 13:34:54 -0700
From: Kim Wright <Ki...@attentiveprice.com>
Subject: Cash for Filling out Surveys?
To: khalidwa@emirates.net.ae
Reply-to: KimWright@attentiveprice.com
Message-id: <0I...@dimail2.emirates.net.ae>
MIME-version: 1.0
X-Mailer: Version 5.01.2046.9400
Content-type: text/html
Original-recipient: rfc822;khalidwa@emirates.net.ae

<HTML>
<BODY bgcolor="#FFFFFF" leftmargin="0" topmargin="0" marginwidth="0" 
marginheight="0">
<center><img 
src='http://attentiveprice.com/images/912046940080000145826/spacer.gif'></center><br>
	<TABLE width="550" border="0" align="center" cellpadding="0" 
cellspacing="0">
	<TR>
	<TD colspan="2"><A 
href="http://attentiveprice.com/go/912046940080000145826/"><IMG 
src="http://attentiveprice.com/sites/00001458/images/paidonlinesurvey_01.gif" 
width="550" height="108" border="0" alt=""></A></TD></TR>
	<TR>
	<TD><A href="http://attentiveprice.com/go/912046940080000145826/"><IMG 
src="http://attentiveprice.com/sites/00001458/images/paidonlinesurvey_02.jpg" 
width="265" height="186" border="0" alt=""></A></TD>
	<TD rowspan="2"><A 
href="http://attentiveprice.com/go/912046940080000145826/"><IMG 
src="http://attentiveprice.com/sites/00001458/images/paidonlinesurvey_03.gif" 
width="285" height="287" border="0" alt=""></A></TD></TR>
	<TR>
	<TD><A href="http://attentiveprice.com/go/912046940080000145826/"><IMG 
src="http://attentiveprice.com/sites/00001458/images/paidonlinesurvey_04.gif" 
width="265" height="101" border="0" alt=""></A></TD></TR>
	<TR>
	<TD colspan="2"><A 
href="http://attentiveprice.com/go/912046940080000145826/"><IMG 
src="http://attentiveprice.com/sites/00001458/images/paidonlinesurvey_05.gif" 
width="550" height="105" border="0" alt=""></A></TD></TR>
	</TABLE>
	<TABLE width="450" border="0" cellspacing="0" cellpadding="2" 
align="center" bgcolor="#FFFFFF">
	<TR>
	<TD height="12" align="center"><FONT size="1" face="Arial, Helvetica, 
sans-serif" color="#000000">You have received this notice by request or 
may have recently become a member of one of our network websites or 
simply signed up for this service. If you no longer wish to remain with 
this service, <a 
href='http://attentiveprice.com/link/912046940080000145826/'>Please 
Click Here</a>.</FONT></TD></TR>
	</TABLE>

</BODY>
</HTML>
----------------------------------------------------------------------------------------





Re: URIBL score

Posted by Khalid Waheed <kh...@eim.ae>.
I added this to /usr/local/share/spamassassin/25_uribl.cf, now it working fine.

Thanks Jeff.



Jeff Chan wrote:

>On Monday, October 18, 2004, 12:27:59 AM, Khalid Waheed wrote:
>  
>
>>The original message and test result is given below,
>>I'm wondering how to improve the score of this message which is sure 
>>spam and listed in URIBL.
>>    
>>
>
>  
>
>>The score of the message is always 3.2 with or without bayes.
>>    
>>
>
>
>  
>
>>-------------------------------------- Test
>>Result----------------------------------------------------------------
>>    
>>
>
>  
>
>>result: .  3 - 
>>HTML_IMAGE_ONLY_20,HTML_MESSAGE,MIME_HTML_ONLY,URIBL_SBL,URIBL_WS_SURBL
>>scantime=2.6,size=2838,mid=<0I...@reedaedtghdfdfedf>,autolearn=disabled
>>    
>>
>
>
>Since the URI domain attentiveprice.com is listed in JP in
>multi.surbl.org, but that list is not included in the default
>SpamAssassin configuration yet, please consider adding it
>to your config:
>
>
>urirhssub URIBL_JP_SURBL  multi.surbl.org.        A   64
>header    URIBL_JP_SURBL  eval:check_uridnsbl('URIBL_JP_SURBL')
>describe  URIBL_JP_SURBL  Contains a URL listed in JP at http://www.surbl.org/lists.html
>tflags    URIBL_JP_SURBL  net
>
>score URIBL_JP_SURBL    3.0
>
>and these will be caught.  (JP will likely be added to the
>default SpamAssassin configuration in version 3.1.)
>
>Jeff C.
>  
>

Re: URIBL score

Posted by Jeff Chan <je...@surbl.org>.
On Monday, October 18, 2004, 4:18:54 AM, Asif Iqbal wrote:
> On Mon, Oct 18, 2004 at 02:14:27AM, Jeff Chan wrote:

> I am using SA 3.0. So I add this to a new file and name in spamcop.cf ?

>> urirhssub URIBL_JP_SURBL  multi.surbl.org.        A   64
>> header    URIBL_JP_SURBL  eval:check_uridnsbl('URIBL_JP_SURBL')
>> describe  URIBL_JP_SURBL  Contains a URL listed in JP at http://www.surbl.org/lists.html
>> tflags    URIBL_JP_SURBL  net
>> 
>> score URIBL_JP_SURBL    3.0
>> 
>> and these will be caught.  (JP will likely be added to the
>> default SpamAssassin configuration in version 3.1.)

Just add it to your existing configuration.

Jeff C.
-- 
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/


Re: URIBL score

Posted by Jeff Chan <je...@surbl.org>.
On Monday, October 18, 2004, 12:27:59 AM, Khalid Waheed wrote:
> The original message and test result is given below,
> I'm wondering how to improve the score of this message which is sure 
> spam and listed in URIBL.

> The score of the message is always 3.2 with or without bayes.


> -------------------------------------- Test
> Result----------------------------------------------------------------

> result: .  3 - 
> HTML_IMAGE_ONLY_20,HTML_MESSAGE,MIME_HTML_ONLY,URIBL_SBL,URIBL_WS_SURBL
> scantime=2.6,size=2838,mid=<0I...@reedaedtghdfdfedf>,autolearn=disabled


Since the URI domain attentiveprice.com is listed in JP in
multi.surbl.org, but that list is not included in the default
SpamAssassin configuration yet, please consider adding it
to your config:


urirhssub URIBL_JP_SURBL  multi.surbl.org.        A   64
header    URIBL_JP_SURBL  eval:check_uridnsbl('URIBL_JP_SURBL')
describe  URIBL_JP_SURBL  Contains a URL listed in JP at http://www.surbl.org/lists.html
tflags    URIBL_JP_SURBL  net

score URIBL_JP_SURBL    3.0

and these will be caught.  (JP will likely be added to the
default SpamAssassin configuration in version 3.1.)

Jeff C.
-- 
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/