Bug 348 - USPS Change-of-Address Confirmation Notices tagged as SPAM
Summary: USPS Change-of-Address Confirmation Notices tagged as SPAM
Status: RESOLVED FIXED
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: 2.20
Hardware: PC Linux
: P2 normal
Target Milestone: ---
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2002-05-24 09:26 UTC by Jim Garrison
Modified: 2002-06-09 18:41 UTC (History)
0 users



Attachment Type Modified Status Actions Submitter/CLA Status

Note You need to log in before you can comment on or make changes to this bug.
Description Jim Garrison 2002-05-24 09:26:42 UTC
The default configuration tags online USPS Change-of-Address confirmations
as SPAM incorrectly, although it really DOES kinda look like SPAM.  You
may want to consider a change to the default rule set to this doesn't
happen "out of the box".

Here's a sample (confirmation link obfuscated):

From - Fri May 24 11:09:21 2002
X-UIDL: f>8!!me@"!ie+!!111"!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <jhg@deliverator.io.com>
Received: (from athensgroup@localhost)
	by mail21.jump.net (8.11.6/) id g4OG9GX08248
	for jgarrison; Fri, 24 May 2002 11:09:16 -0500 (CDT)
Received: from david.io.com (david.io.com [199.170.88.28])
	by mail21.jump.net (8.11.6/) with ESMTP id g4OG9GU08245
	for <jhg@athensgroup.com>; Fri, 24 May 2002 11:09:16 -0500 (CDT)
Received: from david.io.com (david.io.com [199.170.88.28])
	by mail21.jump.net (8.11.6/) with ESMTP id g4OG9GU08245
	for <jhg@athensgroup.com>; Fri, 24 May 2002 11:09:16 -0500 (CDT)
Received: from deliverator.io.com (deliverator.io.com [199.170.88.17])
	by david.io.com (8.11.6/8.11.2) with ESMTP id g4OG9Is27926
	for <jhg@athensgroup.com>; Fri, 24 May 2002 11:09:18 -0500
Received: (from jhg@localhost)
	by deliverator.io.com (8.9.3/8.9.3) id LAA27850
	for jhg@athensgroup.com; Fri, 24 May 2002 11:13:44 -0500
Received: from alias.acm.org (alias.acm.org [199.222.69.90])
	by deliverator.io.com (8.9.3/8.9.3) with ESMTP id LAA27812
	for <jhg@io.com>; Fri, 24 May 2002 11:13:40 -0500
From: address@MoversGuide.com
Received: from bigred.encsc.com ([208.62.149.110])
        by alias.acm.org (Merak 4.4.3) with ESMTP id COB73880
        for <jhg@acm.org>; Fri, 24 May 2002 12:09:06 -0400
Received: from server1 (localhost [127.0.0.1])
	by bigred.encsc.com (Switch-2.1.0/Switch-2.1.0) with SMTP id g4OF5oZ13737
	for <jhg@acm.org>; Fri, 24 May 2002 10:05:50 -0500
Date: Fri, 24 May 2002 10:05:50 -0500
Message-ID: <5036575.1022256568702.JavaMail.nes@server1>
To: jhg@acm.org
Subject: *****SPAM***** Change of Address Order #2047
Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Spam-Status: Yes, hits=6.5 required=5.0
tests=ORDER_STATUS,NO_REAL_NAME,EXCUSE_16,CALL_NOW,LINES_OF_YELLING version=2.20
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Checker-Version: SpamAssassin 2.20 (devel $Id: SpamAssassin.pm,v 1.77
2002/04/06 19:28:30 hughescr Exp $)
X-Spam-Prev-Content-Type: text/plain
X-Spam-Prev-Content-Transfer-Encoding: 7bit
X-UIDL: f>8!!me@"!ie+!!111"!

SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam.  The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM: 
SPAM: Content analysis details:   (6.5 hits, 5 required)
SPAM: Hit! (1.9 points)  Subject looks like order info
SPAM: Hit! (0.6 points)  From: does not include a real name
SPAM: Hit! (1.3 points)  BODY: I wonder how many emails they sent in error...
SPAM: Hit! (2.2 points)  BODY: Urges you to call now
SPAM: Hit! (0.5 points)  BODY: A WHOLE LINE OF YELLING DETECTED
SPAM: 
SPAM: -------------------- End of SpamAssassin results ---------------------

IMMEDIATE ACTION REQUIRED
Your U.S. Postal Change of Address requires one more step!

INSTRUCTIONS:
By 12:00 AM, Tuesday, May 28, 2002, you must go to the web address below
and enter your 7-letter Security ID Code. This will complete your change of
address order.
https://www.MoversGuide.com/ICOAConfirm?tok=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

IF THE WEB ADDRESS ABOVE IS NOT CLICKABLE
Please copy and paste or retype exactly the entire web address into the
"Address" or "Location" bar of your Internet browser and press "Enter" on
your keyboard.

LOST YOUR CODE OR HAVING PROBLEMS?
For security reasons, if you no longer have your Security ID Code, you will
need to resubmit your Change of Address Request.  Our Customer Care
Representatives do NOT have access to these codes. This is for security
purposes.

NOT CHANGING YOUR ADDRESS?
If you did not recently submit an Online Change of Address request and
believe you have received this message in error, please contact us as soon
as possible by replying to this email, address@MoversGuide.com.

NOTE: The person who submits this form states that he or she is the person,
executor, guardian, authorized officer, or agent of the person for whom mail
would be forwarded under this order. Anyone submitting false or inaccurate
information on this form is subject to punishment by fine or imprisonment or
both under Sections 2, 1001, 1702 and 1708 of Title 18, United States Code.
_________________________________________________________________

AN EXCLUSIVE OFFER FOR NEW MOVERS!

-FREE DIRECTV System including Installation
-Access to over 225 channels of programming
-Digital-quality picture and sound
-3 FREE months of 12 Channels STARZ Super Pak 

CALL NOW TO ORDER 1-800-480-4309
_________________________________________________________________
Comment 1 Michael Moncur 2002-05-24 11:22:30 UTC
Isn't ORDER_STATUS another rule that was meant to have a negative (manual) 
score rather than running through the GA?
Comment 2 Craig Hughes 2002-06-10 02:41:21 UTC
ORDER_STATUS has been fixed to be -ve so this bug has become fixed.