Why e-mail was blocked (was Re: [Mimedefang] no filtering happening)

[David F. Skoll]

Michael Lang wrote:

> as i'm not allowed to send plain/text attachments to the list :)
> "554 5.7.1 Message rejected because of unacceptable content.  For help,
> please quote incident ID 78405."

:-)

I checked that incident.  The problem is that your trace file contains
large chunks of an actual spam message.  It scored 99% on our Bayes
corpus and hit a lot of SURBL rules.  Total score was 41.1 and we
auto-reject at 20.  For your interest, the analysis is shown below.

Regards,

David.

Spam Analysis Report (Score = 41.1):

 1.0 PIPE_OBFUSCATION       BODY: Words dis|guised with a pipe sym|bol
 1.0 J_BACKHAIR_32          RAW: 3 letters - Unsightly html tag - 2 letters
 1.0 J_BACKHAIR_35          RAW: 3 letters - Unsightly html tag - 5 letters
 1.2 SARE_OEM_S_DOL         RAW: One strike, you're out
 4.0 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL blocklist
                            [URIs: nadoelovseoem.com]
 3.0 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL blocklist
                            [URIs: nadoelovseoem.com]
 3.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: nadoelovseoem.com]
 3.0 URIBL_OB_SURBL         Contains an URL listed in the OB SURBL blocklist
                            [URIs: nadoelovseoem.com]
 5.0 URIBL_SC_SURBL         Contains an URL listed in the SC SURBL blocklist
                            [URIs: nadoelovseoem.com]
 1.5 SARE_OEM_A_2           More common OEM spam phrases
 2.0 SARE_OEM_A_1           Common OEM spam phrases
 0.8 SARE_OEM_PRODS_1       SARE_OEM_PRODS_1
 0.9 SARE_OEM_PRODS_FEW     SARE_OEM_PRODS_FEW
 0.4 SARE_PRODUCTS_02       SARE_PRODUCTS_02
 0.9 SARE_OEM_PRODS_2       SARE_OEM_PRODS_2
 0	SPF query returned 'none'
Custom Rule   113:        (2.5 points)  body contains <img

Word: 104x19+gif (0.990)
Word: cart+Adobe (0.990)
Word: Professional+right (0.990)
Word: cart+Microsoft (0.990)
Word: dgts+$69 (0.990)
Word: detail+add-to-cart-midsize (0.990)
Word: solid+product (0.990)
Word: add-to-cart-midsize+gif (0.990)
Word: image+BORDER-RIGHT (0.990)
Word: Bestsellers+class (0.990)
Word: Encore+DVD (0.990)
Word: Pro+Office (0.990)
Word: price+$550 (0.990)
Word: nadoelovseoem+class (0.990)
Word: nadoelovseoem+More (0.990)

Score of 10 points due to statistical analysis