[SA-exim] Message w/ subject line falsely tagged by SA

[Marc MERLIN]

On Wed, Nov 26, 2003 at 05:41:56PM -0600, Coax wrote:
> This is a message (well, the headers anyway) of a message SA falsely tags
> - and yet isn't spam.
 
1) it looks like spam to me
2) you should send it to an SA list. SA-Exim trusts whatever SA says :)
 
> 2.70-cvs and 2.60 (the release) both do this.
> 
> Chad
> 
> ---------- Forwarded message ----------
> Return-path: <bounce-a5yuot3o11rgtrmq82vcrvdb at emailbenefits.com>
> Envelope-to: coax at cornernet.com
> Delivery-date: Wed, 26 Nov 2003 17:39:31 -0600
> Received: from maile0-wc5.eqm0.net ([64.32.63.88]:56364)
> 	by emx1.cornernet.com with esmtp (Exim 4.24 #1)
> 	id 1AP9Fn-0001fG-En
> 	for <coax at cornernet.com>; Wed, 26 Nov 2003 17:39:27 -0600
> Received: by maile0-wc5.eqm0.net (PowerMTA(TM) v1.5); Wed,
>      26 Nov 2003 14:38:04 -0800 (envelope-from
>     <bounce-a5yuot3o11rgtrmq82vcrvdb at emailbenefits.com>)
> Errors-To: bounce-a5yuot3o11rgtrmq82vcrvdb at emailbenefits.com
> Message-ID: <LGR13UVI0JWFZ6PN8XRZ. at maile0-wc5.eqm0.net>
> From: Emailbenefits <CoolToy at emailbenefits.com>
> To: coax at cornernet.com
> Mime-Version: 1.0
> Date: Wed, 26 Nov 2003 14:38:04 -0800
> X-SA-Exim-Mail-From: bounce-a5yuot3o11rgtrmq82vcrvdb at emailbenefits.com
> Subject: *****SPAM***** #1 Holiday Toy of 2003 - Sold out in stores
> Content-Type: multipart/alternative;
>     boundary="Boundary_TlOiOcEUbMMqtk_1RSnafQEBzyPG_2uP8"
> X-SA-Exim-Version: 3.1 (built Tue Nov  4 11:00:37 CST 2003)
> X-SA-Exim-Scanned: Yes
> Lines: 69
> X-Spam-Checker-Version: SpamAssassin 2.70-cvs (1.218-2003-11-09-exp) on
> 	emx1.cornernet.com
> X-Spam-Report:
> 	*  1.6 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence between
>     51 and 100
> 	*      [cf: 100]
> 	*  0.0 HTML_MESSAGE BODY: HTML included in message
> 	*  0.9 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
> 	*  0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
> 	*      [64.32.63.88 listed in dnsbl.njabl.org]
> 	*  0.6 RCVD_IN_NJABL_SPAM RBL: NJABL: sender is confirmed spam
>     source
> 	*      [64.32.63.88 listed in dnsbl.njabl.org]
> 	*  2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
>     bl.spamcop.net
> 	*      [Blocked - see <http://www.spamcop.net/bl.shtml?64.32.63.88>]
> 	*  1.3 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List
> 	*      [<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL4965>]
> 	*  0.0 CLICK_BELOW Asks you to click below
> X-Spam-Status: No, hits=6.7 required=7.0 tests=CLICK_BELOW,HTML_MESSAGE,
> 	RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,
> 	RCVD_IN_NJABL,RCVD_IN_NJABL_SPAM,RCVD_IN_SBL autolearn=no
> 	version=2.70-cvs
> X-Spam-Level: ******
> 
> 
> _______________________________________________
> SA-Exim mailing list
> SA-Exim at lists.merlins.org
> http://lists.merlins.org/lists/listinfo/sa-exim
> 

-- 
"A mouse is a device used to point at the xterm you want to type in" - A.S.R.
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/   |   Finger marc_f at merlins.org for PGP key