[Mimedefang] How can I get this email blocked?

David F. Skoll dfs at roaringpenguin.com
Tue Mar 9 14:51:42 EST 2004


On Tue, 9 Mar 2004, Matt Rossiter wrote:

> The link in this email takes
> you to a domain called storefree.biz - can someone suggest away of
> eliminating this spam?

I'm not sure if this helps, but your message to the list got trapped
by CanIt.  Here's the analysis:

SpamAssassin rules weren't too effective...

 1.5 DOMAIN_BODY            BODY: Domain registration spam body
 0.8 HTML_30_40             BODY: Message is 30% to 40% HTML
 0.2 HTML_MESSAGE           BODY: HTML included in message
 0.3 HTML_FONT_BIG          BODY: HTML has a big font
 0.2 HTTP_EXCESSIVE_ESCAPES URI: Completely unnecessary %-escapes inside a URL

They add up to 3 points.  But look at the next part:

Statistical Analysis:
Word: biz (0.990)
Word: s*get (0.990)
Word: 850 (0.990)
Word: Over (0.990)
Word: Download (0.990)
Word: exclusive (0.990)
Word: Start (0.990)
Word: bought (0.990)
Word: loading (0.990)
Word: OEM (0.990)
Word: registration (0.990)
Word: sold (0.990)
Word: registered (0.990)
Word: spams (0.010)
Word: s*How (0.010)
Combined probability = 0.9999
Score of 10 points due to statistical analysis

Per-user Bayes databases are the way to go.

Regards,

David.



More information about the MIMEDefang mailing list