Re: [SLUG] Filtering KMAIL email to Delete Without Using POP Filters

From: Steven Buehler (swbuehler@yahoo.com)
Date: Mon Aug 11 2003 - 11:23:38 EDT


Ha! Probably doesn't help that I send most of my yahoo mail through
RoadRunner's SMTP server and use fetchyahoo to pull it down into KMAIL. :-)

thor_consulting@yahoo.com wrote:too phunny - your message was marked as SPAM
by my SpamAssassin filter:

----- Original Message -----
From: "Steven Buehler"
To:
Sent: Sunday, August 10, 2003 15:39
Subject: *****SPAM***** Re: [SLUG] Filtering KMAIL email to Delete Without
Using POP Filters

> This mail is probably spam. The original message has been attached
> along with this report, so you can recognize or block similar unwanted
> mail in future. See http://spamassassin.org/tag/ for more details.
>
> Content preview: One of the things that SpamAssassin rates for is a fake
> "outlook express" header; it's probably put in so that spam checkers
> along the way will be faked into believing the message is being sent by
> a personal account rather than just a bulk spam mailer (which would be
> less likely to include all the extraneous headers). [...]
>
> Content analysis details: (9.70 points, 4.21 required)
> REFERENCES (-0.0 points) Has a valid-looking References header
> IMPOTENCE (2.9 points) BODY: Impotence cure
> PENIS_ENLARGE2 (2.1 points) BODY: Information on getting a larger
penis or breasts (2)
> HTML_20_30 (1.5 points) BODY: Message is 20% to 30% HTML
> HTML_FONT_BIG (0.2 points) BODY: FONT Size +2 and up or 3 and up
> QUOTED_EMAIL_TEXT (-0.4 points) BODY: Contains what looks like a quoted
email text
> MAILTO_TO_SPAM_ADDR (0.7 points) URI: Includes a link to a likely spammer
email address
> FORGED_YAHOO_RCVD (2.7 points) 'From' yahoo.com does not match
'Received' headers
>

i'll stick to SpamAssassin for now - it has a very low false
positive/negative rate and it even catches the newer tricks smapmmers are
trying.

thor

ps. the only check i don't like is FORGED_YAHOO_RCVD - because i (like you)
use an @yahoo.com email address but i don't send it through yahoo.com.

-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.

=====

Steven W. Buehler | swbuehler@yahoo.com
Web Site: http://www.sanctuaryweb.org
Music Site: http://www.mp3.com/renaitre

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 16:26:15 EDT