RFI scores, bad scores, etc

[Michael Scheidell <sc...@secnap.net>]

While we are talking about changing scores in 3.2 to eliminate spam, how
about getting rid of negative HABEAS scores that allow spam?

This negative spam also triggered the AWL and Bayesian filters, so if I
did not manually pass I this back as spam, anything like this and from
them would be allowed forever.
Spamcop shows evite has appealed their complaints before, and their isp
refused 'munged' email reports.
(means they like spammers, and make it hard to complain, and send our
email addresses to spammers to 'whitelist' their dirty lists)
Sounds like a better reason to adjust scores than you don't like RFI.


Microsoft Mail Internet Headers Version 2.0
Received: from mail.secnap.net ([10.70.1.3]) by secnap2.secnap.com with
Microsoft SMTPSVC(5.0.2195.6713);
	 Tue, 14 Nov 2006 03:36:05 -0500
Received: by mail.secnap.net (Postfix, from userid 1001)
	id AD7BC16483A; Tue, 14 Nov 2006 03:36:04 -0500 (EST)
Received: from 0.mail.spammertrap.net (a0.mail.spammertrap.net
[204.89.241.197])
	by mail.secnap.net (Postfix) with ESMTP id 253CD164838
	for <sc...@secnap.net>; Tue, 14 Nov 2006 03:36:04 -0500
(EST)
Received: from localhost (localhost [127.0.0.1])
	by 0.mail.spammertrap.net (Postfix) with ESMTP id D3F12530449
	for <sc...@secnap.net>; Tue, 14 Nov 2006 03:36:03 -0500
(EST)
X-Spam-Score: -1.041
X-Spam-Status: No, score=-1.041 tagged_above=-999 required=5
tests=[AWL=0.891,
	BAYES_50=0.001, BR_SPAMMER_URI=2, DK_POLICY_SIGNSOME=0.001,
	HABEAS_ACCREDITED_SOI=-4.3, HTML_MESSAGE=0.001,
	HTML_TITLE_SUBJ_DIFF=0.266, SARE_FROM_SPAM_WORD3=0.1,
SPF_PASS=-0.001]
Received: from mail3.evite.com (mail3.evite.com [209.104.61.28])
	by 0.mail.spammertrap.net (Postfix) with ESMTP id 3F2BF530447
	for <sc...@secnap.net>; Tue, 14 Nov 2006 03:35:59 -0500
(EST)
Received: from www31 (www31.evite.com [209.104.61.131])
	by mail3.evite.com (8.12.10/8.12.10) with ESMTP id
kAE8Zm5i028203
	for <sc...@secnap.net>; Tue, 14 Nov 2006 00:35:58 -0800
Date: Tue, 14 Nov 2006 00:35:58 -0800
Message-ID: <27...@www31>
From: uk group lottery Payment <in...@evite.com>
Reply-To: uk group lottery Payment <lo...@myway.com>
To: "scheidell@secnap.net" <sc...@secnap.net>
Subject: Your uk claim.
Mime-Version: 1.0
Content-Type: multipart/related; 
	boundary="----=_Part_245258_11638491.1163493162659"
X-Habeas-Report: Please report use of this mark in spam to
<http://www.habeas.com/report/>
Accreditor: Habeas
X-EviteMessageID: ECREC-FAHLPCNRGFHINQRMNQQE
X-Scanned-By: MIMEDefang 2.39
-- 
Michael Scheidell, CTO
SECNAP Network Security Corporation
Keep up to date with latest information on IT security: Real time
security alerts:
http://www.secnap.com/news
 

Re: RFI scores, bad scores, etc

[Matt Kettler <mk...@verizon.net>]

Michael Scheidell wrote:
> While we are talking about changing scores in 3.2 to eliminate spam, how
> about getting rid of negative HABEAS scores that allow spam?
>   

Why not file a complaint against evite with habeas. After all, the
habeas accreditation system only works if abusers get reported.

In this case, evite is being abused by someone else, but that alone
suggests evite should NOT be on habeas. Anyone can use evite to send
messages...