[seqfan] Beware of false-positives
Antti Karttunen
Antti.Karttunen at iki.fi
Sat Jul 19 03:14:22 CEST 2003
Note:
For some reason our over-eager SpamAssassin labels
OEIS's acknowledgement mail for the A-numbers I reserved
as a specimen of SPAM:
Return-Path: <njas at research.att.com>
Delivered-To: karttu at ndirty.cute.fi
Date: Fri, 18 Jul 2003 17:43:01 -0400 (EDT)
To: njas at research.att.com
Cc: Antti.Karttunen at iki.fi
Subject: *****SPAM***** NEW A-NUMBERS
Reply-To: njas at research.att.com
X-Spam-Status: Yes, hits=6.0 required=5.0
tests=FROM_AND_TO_SAME_3,NO_REAL_NAME,RCVD_IN_ORBS,
SPAM_PHRASE_01_02,SUBJ_ALL_CAPS
version=2.42
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Checker-Version: SpamAssassin 2.42 (1.115.2.14-2002-10-04-exp)
SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam. The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM:
SPAM: Content analysis details: (6.00 hits, 5 required)
SPAM: NO_REAL_NAME (1.3 points) From: does not include a real name
SPAM: SPAM_PHRASE_01_02 (0.5 points) BODY: Spam phrases score is 01 to 02 (low)
SPAM: [score: 1]
SPAM: FROM_AND_TO_SAME_3 (1.5 points) From and To are same (3)
SPAM: SUBJ_ALL_CAPS (0.5 points) Subject is all capitals
SPAM: RCVD_IN_ORBS (2.2 points) RBL: Received via a relay in orbs.dorkslayers.com
SPAM: [RBL check: found 10.225.20.192.orbs.dorkslayers.com., type: 65.246.50.11]
SPAM:
SPAM: -------------------- End of SpamAssassin results ---------------------
Email address: Antti.Karttunen at iki.fi
Remote address: 193.229.31.170
QQQ%%%ZZZ 193.229.31.170 got 10 numbers, 86425 through 86434. Next free is 86435
What site is orbs.dorkslayers.com and why it is considered so spamful?
I think now it would be just enough to swap the To: and Cc:
fields, so that To: would contain the address of the reserver
and Cc: the address of Neil, so there would be only 6 - 1.5 = 4.5 points,
just less than the spam threshold of 5. However, these settings may
vary on other sites. (So maybe also one could use lowercase in the subject,
e.g. something like OEIS: New A-numbers, etc.)
Yours,
Antti
More information about the SeqFan
mailing list