[Mimedefang] How can I get this email blocked?
David F. Skoll
dfs at roaringpenguin.com
Tue Mar 9 14:51:42 EST 2004
On Tue, 9 Mar 2004, Matt Rossiter wrote:
> The link in this email takes
> you to a domain called storefree.biz - can someone suggest away of
> eliminating this spam?
I'm not sure if this helps, but your message to the list got trapped
by CanIt. Here's the analysis:
SpamAssassin rules weren't too effective...
1.5 DOMAIN_BODY BODY: Domain registration spam body
0.8 HTML_30_40 BODY: Message is 30% to 40% HTML
0.2 HTML_MESSAGE BODY: HTML included in message
0.3 HTML_FONT_BIG BODY: HTML has a big font
0.2 HTTP_EXCESSIVE_ESCAPES URI: Completely unnecessary %-escapes inside a URL
They add up to 3 points. But look at the next part:
Statistical Analysis:
Word: biz (0.990)
Word: s*get (0.990)
Word: 850 (0.990)
Word: Over (0.990)
Word: Download (0.990)
Word: exclusive (0.990)
Word: Start (0.990)
Word: bought (0.990)
Word: loading (0.990)
Word: OEM (0.990)
Word: registration (0.990)
Word: sold (0.990)
Word: registered (0.990)
Word: spams (0.010)
Word: s*How (0.010)
Combined probability = 0.9999
Score of 10 points due to statistical analysis
Per-user Bayes databases are the way to go.
Regards,
David.
More information about the MIMEDefang
mailing list