Högsta SPAM värde noterade av SSA.sE

NUE	8.7
IFP	8.4
ATL	8.4
SA3B	7.8
SK4KO	7.2
JEB	6.9
YJS	6.4
FZH	6.0
ACR	6.0
SA3B	5.5
CCO	5.5
HJI	5.5
DXO	5.0

Spam detection software, running on the system "ssa.se", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content analysis details:   (8.4 points, 5.0 required)

Exempel på poäng.

 pts rule name              description
---- ---------------------- --------------------------------------------------
 4.5 HELO_LOCALHOST         HELO_LOCALHOST
 4.2 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
 2.9 TVD_SPACE_RATIO        BODY: TVD_SPACE_RATIO
 2.7 TRACKER_ID             BODY: Incorporates a tracking ID number
 2.8 BASE64_LENGTH_79_INF   BODY: BASE64_LENGTH_79_INF
 1.8 MIME_QP_LONG_LINE      RAW: Quoted-printable line longer than 76 chars
 1.8 SUBJ_ALL_CAPS          Subject is all capitals
 1.5 MSGID_FROM_MTA_HEADER  Message-Id was added by a relay
 1.4 FORGED_YAHOO_RCVD      'From' yahoo.com does not match 'Received' headers
 1.3 MISSING_SUBJECT        Missing Subject: header
 1.2 SPF_NEUTRAL            SPF: sender does not match SPF record (neutral) 
 0.3 DYN_RDNS_SHORT_HELO_HTML Sent by dynamic rDNS, short HELO, and HTML
 0.1 RDNS_DYNAMIC           Delivered to trusted network by host with
                            dynamic-looking rDNS
-1.0 RCVD_IN_DNSWL_LOW      RBL: Sender listed at http://www.dnswl.org/, low
                            trust [81.228.9.102 listed in list.dnswl.org]

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

Jag förstår dessa:

 1.8 SUBJ_ALL_CAPS          Subject is all capitals
 1.3 MISSING_SUBJECT        Missing Subject: header

 4.5 HELO_LOCALHOST         HELO_LOCALHOST se

http://my.opera.com/raphman/blog/2008/04/11/opera-helo-localhost-and-etc-hosts-vs-etc-hostname

 2.9 TVD_SPACE_RATIO        BODY: TVD_SPACE_RATIO

it's the ratio of spaces to non-spaces in each paragraph. apparently messages where generally there are lots of spaces mean the message is spam.

 1.8 MIME_QP_LONG_LINE      RAW: Quoted-printable line longer than 76 chars

appearance of several lines of text that are longer than 76 characters.

/ NZB