You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by David B Funk <db...@engineering.uiowa.edu> on 2006/10/12 07:43:32 UTC
PRIORITY_NO_NAME FP on newegg shipping notice
Saw a FP on a shipping notice from newegg.com, largely due
to PRIORITY_NO_NAME & RCVD_IN_WHOIS_INVALID
Headers were:
From info@newegg.com Thu Oct 12 00:09:59 2006 -0500
Return-Path: <in...@newegg.com>
Received: from star.its.uiowa.edu (star.its.uiowa.edu [128.255.56.186])
by server07.icaen.uiowa.edu (8.13.5.20060308/8.12.9) with ESMTP id k9C4wd88012689
for <us...@engineering.uiowa.edu>; (envelope-from <in...@newegg.com>) Wed, 11 Oct 2006 23:58:39 -0500 (CDT)
Received: from SMTP2.magnellmail.net (smtp2.newegg.com [65.119.30.178])
by star.its.uiowa.edu (8.13.6/8.12.9/uiowa-3.7) with ESMTP id k9C4wc9J017909
for <fi...@uiowa.edu>; Wed, 11 Oct 2006 23:58:38 -0500
Received: from s1gen004.buyabs.corp ([65.119.30.193]) by SMTP2.magnellmail.net with Microsoft SMTPSVC(5.0.2195.6713);
Wed, 11 Oct 2006 21:57:09 -0700
Received: from mail pickup service by s1gen004.buyabs.corp with Microsoft SMTPSVC;
Wed, 11 Oct 2006 21:57:58 -0700
From: <in...@newegg.com>
To: <fi...@uiowa.edu>
Subject: {*** SPAM 7.4 } Your UPS Tracking Number from Newegg.com
Date: Wed, 11 Oct 2006 21:57:58 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_8A08_01C6ED80.505BFB40"
X-Priority: 3
X-MSMail-Priority: Normal
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
Message-ID: <S1...@s1gen004.buyabs.corp>
X-OriginalArrivalTime: 12 Oct 2006 04:57:58.0816 (UTC) FILETIME=[FCD51200:01C6EDBA]
X-Spam-Status: LOW ; 74
X-Spam-Level: *******++++
X-Spam-Report: Checker-Version SpamAssassin 3.1.5 (2006-08-29) on server37.icaen.uiowa.edu
Content analysis details: (7.4 points, 6.0 required, autolearn=no)
pts rule name description
---- ---------------------- ------------------------------------------
1.0 NO_REAL_NAME From: does not include a real name
0.3 COMBINED_FROM From address suggests this is spam
0.1 FORGED_RCVD_HELO Received: contains a forged HELO
-0.2 BAYES_40 BODY: Bayesian spam probability is 20 to 40%
[score: 0.3671]
0.4 HTML_30_40 BODY: Message is 30% to 40% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
2.2 RCVD_IN_WHOIS_INVALID RBL: CompleteWhois: sender on invalid IP block
[65.119.30.178 listed in combined-HIB.dnsiplists.completewhois.com]
2.7 PRIORITY_NO_NAME Message has priority, but no user agent name
0.6 FVGT_m_MULTI_ODD2 Contains multiple odd letter combinations
0.3 FVGT_m_MULTI_ODD3 Contains multiple odd letter combinations
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
Re: PRIORITY_NO_NAME FP on newegg shipping notice
Posted by Clifton Royston <cl...@lava.net>.
On Thu, Oct 12, 2006 at 12:43:32AM -0500, David B Funk wrote:
> Saw a FP on a shipping notice from newegg.com, largely due
> to PRIORITY_NO_NAME & RCVD_IN_WHOIS_INVALID
I've also seen some problems with Newegg transactional mail, probably
the same rules. Stuck it aside to look at later.
-- Clifton
--
Clifton Royston -- cliftonr@iandicomputing.com / cliftonr@lava.net
President - I and I Computing * http://www.iandicomputing.com/
Custom programming, network design, systems and network consulting services