You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Gary Smith <ga...@primeexalia.com> on 2004/04/04 20:22:28 UTC

RE: [Suspected SPAM] missed spam with random junk

Luckily I was cleaning out my spam folder today... Anyways, Chickpox
caught this one pretty good.

Gary

X-Spam-Status: Yes, hits=7.9 required=4.8
tests=FOR_FREE,HTML_FONTCOLOR_BLUE,
	HTML_FONTCOLOR_RED,HTML_FONT_BIG,HTML_MESSAGE,J_CHICKENPOX_12,
	J_CHICKENPOX_22,J_CHICKENPOX_23,J_CHICKENPOX_24,J_CHICKENPOX_34,
	J_CHICKENPOX_44,J_CHICKENPOX_45,J_CHICKENPOX_54,J_CHICKENPOX_56,
	PRIORITY_NO_NAME,RCVD_IN_SORBS autolearn=no version=2.63
X-Spam-Report: 
	*  0.6 J_CHICKENPOX_22 BODY: {2}Letter - punctuation - {2}Letter
	*  0.6 J_CHICKENPOX_34 BODY: {3}Letter - punctuation - {4}Letter
	*  0.6 J_CHICKENPOX_56 BODY: {5}Letter - punctuation - {6}Letter
	*  0.6 J_CHICKENPOX_54 BODY: {5}Letter - punctuation - {4}Letter
	*  0.6 J_CHICKENPOX_24 BODY: {2}Letter - punctuation - {4}Letter
	*  0.6 J_CHICKENPOX_12 BODY: {1}Letter - punctuation - {2}Letter
	*  0.6 J_CHICKENPOX_45 BODY: {4}Letter - punctuation - {5}Letter
	*  0.6 FOR_FREE BODY: No such thing as a free lunch (1)
	*  0.6 J_CHICKENPOX_23 BODY: {2}Letter - punctuation - {3}Letter
	*  0.6 J_CHICKENPOX_44 BODY: {4}Letter - punctuation - {4}Letter
	*  0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue
	*  0.1 HTML_MESSAGE BODY: HTML included in message
	*  0.3 HTML_FONT_BIG BODY: HTML has a big font
	*  0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red
	*  0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
	*      [68.62.237.149 listed in dnsbl.sorbs.net]
	[204.127.202.55 listed in dnsbl.sorbs.net]
	*  1.2 PRIORITY_NO_NAME Message has priority setting, but no
X-Mailer


-----Original Message-----
From: Vermyndax [mailto:vermyndax@red-abstract.com] 
Sent: Sunday, April 04, 2004 10:37 AM
To: spamassassin-users@incubator.apache.org
Subject: [Suspected SPAM] missed spam with random junk

I am getting a rash of spam that slips through SA with very, very low
scores.  Attached message is an example.  The body of the message
contains
gibberish with an HTML version attached.

This sample scores frighteningly low... 1.5.  Have I missed a set of
rules
that catch this crap?

Thanks in advance...

--JM