[SPAM] test

[brett at netacc.net (Brett Van Sprewenburg)]

At 12:52 AM +0000 6/28/04, Julie Macfarlane wrote:
>Has any one worked out what that [spam] tag is yet?
>
>
>
>Julie Macfarlane


Yes, it takes looking at the full header of the message tagged as [SPAM]
though to see why, here is the message headers that started this thread:

------------------

X-Originating-IP: [195.178.11.4]
X-Originating-Email: [speed_racer84@hotmail.com]
X-Sender: speed_racer84@hotmail.com
From: "Rob ." <speed_racer84@hotmail.com>
To: scirocco-l@scirocco.org
Date: Mon, 28 Jun 2004 00:22:26 +0000
X-OriginalArrivalTime: 28 Jun 2004 00:22:26.0714 (UTC)
	FILETIME=[FD977FA0:01C45CA5]
X-ACL-Warn: Classified as spam (score 4.1)
X-Spam-Flag: YES
X-Spam-Score: 4.1 (++++)
X-Spam-Report: Spam detection software, running on the system
	"hohn.neubayern.net", hasmessageblock
	similar future email.  If you have any questions, see
	the administrator of that system for details.the
	list again Rob Nettles URI:http://www.geocities.com/p_phi_p99
	http://www.geocities.com/p_phi_p99 [...]
	Content analysis details:   (4.1 points, 3.5 required)
	pts rule name              description
	--------------------------------------------------
	0.9 FROM_ENDS_IN_NUMS      From: ends in numbers
	0.0 HTML_MESSAGE           BODY: HTML included in messageparts
	0.2 HTML_50_60             BODY: Message is 50% to 60% HTML
	0.7 MIME_HTML_NO_CHARSET   RAW: Message text in HTML without charset
	0.1 RCVD_IN_SORBS          RBL: SORBS: sender is listed in SORBS
	[195.178.11.4 listed in dnsbl.sorbs.net]numbers/letters
X-Content-Filtered-By: Mailman/MimeDel 2.1.1
Subject: [SPAM] test
X-BeenThere: scirocco-l@scirocco.org
X-Mailman-Version: 2.1.1
Sender: scirocco-l-bounces@scirocco.org

------------------

Here's my advice for this *particular* flagged email:

1. stop writing emails in HTML (the list software converts it, but 
99% of spam email
contains HTML, and there's *NOTHING* you need to say on this list 
that requires HTML)
2. when using HTML mail, use mail software that can at least specify 
the MIME type
properly
3. switch to an ISP that is not known to host spamming, or create the 
open relays that
*could* be or have been used by spammers
4.  use an email return address that does not end in a number (like 
so many spammers do)


These draconian counter-measures brought to you mostly by lazy 
sysadmins that misconfigure
their email gateways and a widely comprimised operating system made 
by a company in Redmond.


==Brett