[AMaViS-user] some mail making it through

even though the score is way up there.. not sure why this is getting =
thru..
=20
Like this ....
=20

-----------------------
Hit : 24.931
From : meosoaxkdtoi@yahoo.com
Subject : re [6]
-- Destinataires ------

-----------------------
This file was quarantined with the following path:

spam-b206d856c34609a66406f52137c33f72-20050810-131939-28031-10
Spam detection software, running on the system "sk2.int.daeda.net", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
chris@daeda.net for details.

Content preview: into account in 2000 Icons SI Swimsuit Issue Coyote
Ugly Study: Most still not [...]

Content analysis details: (24.9 points, 5.0 required)

pts rule name description
---- ---------------------- =
--------------------------------------------------
1.7 MSGID_FROM_MTA_ID Message-Id for external message added =
locally
2.7 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' =
headers
3.2 DOMAIN_RATIO BODY: Message body mentions many internet =
domains
0.1 HTML_80_90 BODY: Message is 80% to 90% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of =
words
0.8 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to background
0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above =
50%
[cf: 100]
4.3 BAYES_99 BODY: Bayesian spam probability is 99 to =
100%
[score: 1.0000]
0.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
2.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP =
address
[69.79.43.232 listed in dnsbl.sorbs.net]
0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL =
blocklist
[URIs: kdegohoodkk.com]
2.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL =
blocklist
[URIs: kdegohoodkk.com]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL =
blocklist
[URIs: kdegohoodkk.com]

--- BEGIN HEADERS -----
Return-Path: <meosoaxkdtoi@yahoo.com>
Received: from Dynamic-IP-cr697943232.cable.net.co (unknown =
[69.79.43.232])
by sk2.int.daeda.net (Postfix) with SMTP id 3F7E0AAE3CA
for <chris@daeda.net>; Wed, 10 Aug 2005 13:19:36 -0500 (CDT)
FCC: mailbox://meosoaxkdtoi@yahoo.com/Sent
X-Identity-Key: id1
Date: Wed, 10 Aug 2005 14:16:00 -0500
From: Whitney Mcneil <meosoaxkdtoi@yahoo.com>
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: chris@daeda.net
Subject: re [6]
Content-Type: multipart/related;
boundary=3D"------------020007090704090003000009"
Message-Id: <20050810181936.3F7E0AAE3CA@sk2.int.daeda.net>
--- END HEADERS -------



=20
any ideas?=20
=20
Thanks,
chris
=20
=20


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/