Neil Turner's Blog

Blogging about technology and randomness since 2002

Ya gotta love SpamAssassin

Although my university mail account has used SpamAssassin for sometime now, my everyday account hasn’t had it until I changed hosts. It’s been interesting to see what scores each item of mail gets, and while this latest one isn’t good enough to make the high score chart, it’s still pretty high:

Content analysis details:   (42.6 points, 7.0 required)

pts rule name description ---- ---------------------- -------------------------------------------------- 4.4 DATE_SPAMWARE_Y2K Date header uses unusual Y2K formatting 0.3 RCVD_NUMERIC_HELO Received: contains a numeric HELO 0.5 REMOVE_REMOVAL_2WORD BODY: List removal information 2.8 SENT_IN_COMPLIANCE BODY: Claims compliance with spam regulations 0.1 REMOVE_SUBJ BODY: List removal information 0.1 HTML_70_80 BODY: Message is 70% to 80% HTML 0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red 0.1 LINES_OF_YELLING_2 BODY: 2 WHOLE LINES OF YELLING DETECTED 0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 HTML_FONT_BIG BODY: HTML has a big font 0.0 LINES_OF_YELLING BODY: A WHOLE LINE OF YELLING DETECTED 2.4 HTML_SHOUTING7 BODY: HTML has very strong "shouting" markup 0.7 MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset 3.0 FORGED_RCVD_NET_HELO Host HELO'd using the wrong IP network 2.8 DATE_IN_FUTURE_03_06 Date: is 3 to 6 hours after Received: date 1.1 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server [ listed in] 4.3 RCVD_IN_OPM RBL: Received via a relay in [ listed in] 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS [ listed in] 0.1 RCVD_IN_NJABL RBL: Received via a relay in [ listed in] 4.3 RCVD_IN_OPM_HTTP RBL: OPM: sender is open HTTP CONNECT proxy [ listed in] 1.1 RCVD_IN_DSBL RBL: Received via a relay in [><] 1.1 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy [ listed in] 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in [Blocked - see ><] 4.3 RCVD_IN_OPM_HTTP_POST RBL: OPM: sender is open HTTP POST proxy [ listed in] 1.6 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format 1.2 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.3 UPPERCASE_25_50 message body is 25-50% uppercase 1.1 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts


  1. Yikes! I use SpamAssassin on all of my e-mail and I get a ton of spam, but I’ve never seen one with that high of “score.” ๐Ÿ™‚

  2. Alas my highest is 49.8.
    It’s interesting if you can measure your daily aggregate score – I sampled a weeks worth a few months back and it makes interesting analysis. If only such analysis was built in…

  3. I set the score for Microsoft executable attachments to +100.00. Makes for some fun scores. ๐Ÿ™‚