[luau] SpamAssassin and Exchange Webmail

R. Scott Belford sctinc at flex.com
Tue Jul 1 22:54:00 PDT 2003


This is how it is tagged with a recent version of SA on Red Hat 7.2.  I have
to agree that it is much safer and informative the newer way than it is via
debian stable.

--scott



This mail is probably spam.  The original message has been attached
along with this report, so you can recognize or block similar unwanted
mail in future.  See http://spamassassin.org/tag/ for more details.

Content preview:  LUSTFUL and SEX-STARVED TEENS!

http://girlsthatgo.com/click.php?id104748&campain_id88&type=text&site_id4
  The HOTTEST YOUNG MODELS... The BEST PHOTOGRAPHY... The NAUGHTIEST SEX
  ACTS...

http://girlsthatgo.com/click.php?id104748&campain_id88&type=text&site_id4
  [...]

Content analysis details:   (15.70 points, 5 required)
FROM_ENDS_IN_NUMS  (0.7 points)  From: ends in numbers
NASTY_GIRLS        (2.8 points)  BODY: Possible porn - Nasty Girls
PORN_16            (2.9 points)  BODY: Possible porn - nasty, dirty, little
etc.
HTML_WEB_BUGS      (0.1 points)  BODY: Image tag with an ID code to identify
you
HTML_IMAGE_ONLY_10 (0.5 points)  BODY: HTML has images with 800-1000 bytes
of words
HTML_50_60         (0.5 points)  BODY: Message is 50% to 60% HTML
HTML_MESSAGE       (0.1 points)  BODY: HTML included in message
HTML_FONT_COLOR_BLUE (0.1 points)  BODY: HTML font color is blue
HTML_LINK_CLICK_HERE (0.1 points)  BODY: HTML link text says "click here"
MIME_HTML_NO_CHARSET (0.8 points)  RAW: Message text in HTML without
specified charset
HTTP_WITH_EMAIL_IN_URL (0.3 points)  URI: 'remove' URL contains an email
address
MAILTO_TO_REMOVE   (0.3 points)  URI: Includes a 'remove' email address
REMOVE_PAGE        (0.3 points)  URI: URL of page called "remove"
MSG_ID_ADDED_BY_MTA_3 (0.7 points)  'Message-Id' was added by a relay (3)
DATE_IN_PAST_96_XX (1.6 points)  Date: is 96 hours or more before Received:
date
FORGED_MUA_OUTLOOK (3.5 points)  Forged mail pretending to be from MS
Outlook
CLICK_BELOW        (0.1 points)  Asks you to click below
FROM_ALL_NUMS      (0.3 points)  From an address that is all numbers
(non-phone)

The original message did not contain plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.





More information about the LUAU mailing list