Bug 2567 - Poetry/Prose spam getting through
Summary: Poetry/Prose spam getting through
Status: RESOLVED WORKSFORME
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: spamassassin (show other bugs)
Version: 2.60
Hardware: Other other
: P5 normal
Target Milestone: 3.0.0
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-10-08 11:00 UTC by Robert James Kaes
Modified: 2004-02-18 11:53 UTC (History)
0 users


Attachment Type Modified Status Actions Submitter/CLA Status
Example 1 of Poetry/Prose Spam text/plain None Robert James Kaes [NoCLA]
Example 2 of Poetry/Prose Spam text/plain None Robert James Kaes [NoCLA]
Example 3 of Poetry/Prose Spam text/plain None Robert James Kaes [NoCLA]
Example 4 of Poetry/Prose Spam text/plain None Robert James Kaes [NoCLA]
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Robert James Kaes 2003-10-08 11:00:11 UTC 
Attached are four spam messages that are slipping past SpamAssassin's filters. 
The common factor is that they contain prose or poetry in the text/plain
section, but the text/html section contains the spam message.  Also, the spam
message is _heavily_ encoded.
Comment 1 Robert James Kaes 2003-10-08 11:01:01 UTC 
Created attachment 1470 [details]
Example 1 of Poetry/Prose Spam
Comment 2 Robert James Kaes 2003-10-08 11:01:38 UTC 
Created attachment 1471 [details]
Example 2 of Poetry/Prose Spam
Comment 3 Robert James Kaes 2003-10-08 11:02:16 UTC 
Created attachment 1472 [details]
Example 3 of Poetry/Prose Spam
Comment 4 Robert James Kaes 2003-10-08 11:02:40 UTC 
Created attachment 1473 [details]
Example 4 of Poetry/Prose Spam
Comment 5 Justin Mason 2004-02-18 20:53:21 UTC 
Content analysis details:   (6.3 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.8 HTML_30_40             BODY: Message is 30% to 40% HTML
 0.2 HTML_MESSAGE           BODY: HTML included in message
 0.9 HTML_FONT_INVISIBLE    BODY: HTML font color is same as background
 0.7 BIZ_TLD                URI: Contains a URL in the BIZ top-level domain
 3.7 MSGID_FROM_MTA_SHORT   Message-Id was added by a relay