[seqfan] Beware of false-positives

Antti Karttunen Antti.Karttunen at iki.fi
Sat Jul 19 03:14:22 CEST 2003


Note:
For some reason our over-eager SpamAssassin labels
OEIS's acknowledgement mail for the A-numbers I reserved
as a specimen of SPAM:

Return-Path: <njas at research.att.com>
Delivered-To: karttu at ndirty.cute.fi
Date: Fri, 18 Jul 2003 17:43:01 -0400 (EDT)
To: njas at research.att.com
Cc: Antti.Karttunen at iki.fi
Subject: *****SPAM***** NEW A-NUMBERS
Reply-To: njas at research.att.com
X-Spam-Status: Yes, hits=6.0 required=5.0
        tests=FROM_AND_TO_SAME_3,NO_REAL_NAME,RCVD_IN_ORBS,
              SPAM_PHRASE_01_02,SUBJ_ALL_CAPS
        version=2.42
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Checker-Version: SpamAssassin 2.42 (1.115.2.14-2002-10-04-exp)

SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam.  The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM: 
SPAM: Content analysis details:   (6.00 hits, 5 required)
SPAM: NO_REAL_NAME       (1.3 points)  From: does not include a real name
SPAM: SPAM_PHRASE_01_02  (0.5 points)  BODY: Spam phrases score is 01 to 02 (low)
SPAM:                    [score: 1]
SPAM: FROM_AND_TO_SAME_3 (1.5 points)  From and To are same (3)
SPAM: SUBJ_ALL_CAPS      (0.5 points)  Subject is all capitals
SPAM: RCVD_IN_ORBS       (2.2 points)  RBL: Received via a relay in orbs.dorkslayers.com
SPAM:                    [RBL check: found 10.225.20.192.orbs.dorkslayers.com., type: 65.246.50.11]
SPAM: 
SPAM: -------------------- End of SpamAssassin results ---------------------

Email address: Antti.Karttunen at iki.fi
Remote address: 193.229.31.170
QQQ%%%ZZZ 193.229.31.170 got 10 numbers, 86425 through 86434. Next free is 86435


What site is orbs.dorkslayers.com and why it is considered so spamful?
I think now it would be just enough to swap the To: and Cc:
fields, so that To: would contain the address of the reserver
and Cc: the address of Neil, so there would be only 6 - 1.5 = 4.5 points,
just less than the spam threshold of 5. However, these settings may
vary on other sites. (So maybe also one could use lowercase in the subject,
e.g. something like OEIS: New A-numbers, etc.)


Yours,

Antti





More information about the SeqFan mailing list