[Bradford] Spam stuff (was Re: Drupal meeting)

[David Parkin]

They (Yahoo) also suggested that attachments were an indicator of possible spam, so you can see how Bradlug messages get treated suspiciously. It manifested itself in my case by presenting me with a gotcha everytime I tried to reply to a Bradlug message. On the few times I could read the gotcha it still didn't send.

David




________________________________
From: Martyn Ranyard <ranyardm at gmail.com>
To: bradford at mailman.lug.org..uk
Sent: Wed, 18 November, 2009 17:00:51
Subject: [Bradford] Spam stuff (was Re:  Drupal meeting)

Hi Dick,

2009/11/18 Dick Thomas <xpd259 at gmail.com>
>
> there was n issue with the mailing list filtering emails with an pgp
> attachment to spam but that "should" be fixed now.

Yes but there was no pgp attachment to Alices mail and whilst I'm quite happy to suspect Google's spam filter was just being over-zealous, it is extremely unusual for that to happen and other occurrences have been reported of mail not getting through...

Here's the main headers from the mail that got tagged as spam by google :


From: "=?iso-8859-1?Q?Alice_K=E6rast?=" <kaerast at computergentle.com>
To: <david.carpenter at nornir.co.uk>,
<bradford at mailman.lug.org.uk>
Date: Wed, 18 Nov 2009 10:05:40 -0000
MIME-Version: 1.0
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.1432.1
X-lug.org.uk-Spam-Score: -2.6 (--)
X-lug.org.uk-Spam-Report: No, score=-2.6 required=5.0 autolearn=ham
version=3.2.3; 
pts rule name              description
-2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
[score: 0.0000]
Scanned on host mail-in-01.lug.org.uk on Wed,
18 Nov 2009 10:05:49 +0000.
If you have any query please contact postmaster at lug.org.uk
X-lug.org.uk-Virus-Scanner: Scanned by ClamAV on mail-in-01.lug.org.uk at Wed, 
18 Nov 2009 10:05:49 +0000
X-Mailman-Approved-At: Wed, 18 Nov 2009 13:03:35 +0000
Subject: Re: [Bradford] Drupal meeting
X-BeenThere: bradford at mailman.lug.org.uk
X-Mailman-Version: 2.1.9

 
Now, one thing I noticed that jumped out is that Alice is using a special char in her name, which is often going to flag things up, but in contrast, one of the other messages had the following headers and wasn't marked as spam :


From: <hudsonjr at ntlworld.com>
To: bradford <bradford at mailman.lug.org.uk>
In-Reply-To: <1258364295.12042.12.camel at david-laptop>
MIME-Version: 1.0
X-Priority: 3 (Normal)
Sensitivity: Normal
X-Originating-IP: from 82.47.182.199 by webmail.ntlworld.com;
Tue, 17 Nov 2009 12:56:53 +0000
X-Mailer: 4.2.8
X-Cloudmark-Analysis: v=1.0 c=1 a=C9LpeOOAF9sA:10 a=vqgxMe-LcG-IpeUAQ7wA:9
a=1Bmlo3dONaMsSLOL_U5Ww-IZFqIA:4
X-lug.org.uk-Spam-Score: -2.6 (--)
X-lug.org.uk-Spam-Report: No, score=-2.6 required=5.0 autolearn=ham
version=3.2.3; 
pts rule name              description
-0.0 SPF_PASS               SPF: sender matches SPF record
-2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
[score: 0.0000]
Scanned on host mail-in-01.lug.org.uk on Tue,
17 Nov 2009 12:57:04 +0000.
If you have any query please contact postmaster at lug.org.uk
X-lug.org.uk-Virus-Scanner: Scanned by ClamAV on mail-in-01.lug.org.uk at Tue,
17 Nov 2009 12:57:04 +0000
Cc: bradlug at googlegroups.com
Subject: [Bradford] FOSS Day: Meeting with Anthony Clipsom
X-BeenThere: bradford at mailman.lug.org.uk
X-Mailman-Version: 2.1.9

Note that the X-lug.org.uk-Spam-Score was exactly the same, but the X-Cloudmark-Analysis header has been added - This again could be something added at google's end but might be woth looking at the differences.

Alice, it is probably worth bearing in mind that using the dipthong in your From is quite possibly going to mark your mail as spam, which I have no doubt is something you want to avoid.  Annoying though it is, a huge volume of spam comes from countries with different character sets and the more fascist spam engines will weigh it heavy, especially as the charset of the mail doesn't necessarily match the charset of the from section.

Anyway, that's all nice and disjointed thoughts that may or may not be useful.

--
Martyn



      
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.lug.org.uk/pipermail/bradford/attachments/20091118/3dfafcee/attachment.htm