This suggests that the sender is trying to hide content 'below the page fold', that the recipient may not scroll down to see.

Standard description: Message body has 80-90% blank lines Standard description: Message body has 70-80% blank lines Standard description: Bayes spam probability is 99 to 100% Standard description: Bayes spam probability is 95 to 99% Standard description: Bayes spam probability is 80 to 95% Standard description: Bayes spam probability is 60 to 80% Standard description: Bayesian spam probability is 40 to 60% Standard description: Bayes spam probability is 20 to 40% Standard description: Bayes spam probability is 5 to 20% Standard description: Bayes spam probability is 1 to 5% If the user receives the same message via a new unlisted relay, the Bayesian algorithm will assign a high score to it based on previous experience.Ĭonversely, if a user receives a regular newsletter from a fitness club, and one issue makes reference to diet pills and weight loss (which would normally flage the message as spam), the Bayesian algorithm will assign a lower score to it. For instance, a user may receive a particular spam message several times via a relay identified in a DNSBL, so that SpamAssassin correctly identifies it as spam. This can assign both positive and negative scores. SpamAssassin includes a Bayesian filter that assigns scores based on the user's previous email history. Standard description: Bayes spam probability is 0 to 1% Standard description: base 64 with length 79 and on. Thus a mail from a previous sender that's otherwise scored higher than average may receive a negative score a mail scored lower than average may receive a positive score.Īccording to, base 64 should only be 76 chars long, so these are out of format. The auto white-list (AWL) keeps track of the scores associated with known senders and pushes the total score for the mail toward the average for the sender. Standard description: From: address is in the auto white-list As such addresses containing them use may be considered unusual. Note that, while the email address specification allows for apostrophes to be included in the local-part of an address, use of apostrophes has been historically discouraged for security and interoperability reasons. The apostrophe character ''' appears in the address part of the From: header. Standard description: From address contains an apostrophe If that message is obviously spam, and you think it should have been caught by DNS tests, then your trust path is configured incorrectly. If your message hits on the ALL_TRUSTED rule, it means that all of the Received: headers in the message were inserted by SMTP relays you have indicated are 'TrustedRelays' and the 'from' part of the Received: header is also from one of your 'TrustedRelays' consequently, no tests of the source of the message (for example, tests against DNSBlocklists) will be performed. 'Trusted' does not mean 'trusted to not send spam.' It means 'trusted to not forge Received: headers.' Standard description: Passed through trusted hosts only via SMTP See Wikipedia for details regarding Advance fee fraud. Listing non-exhaustif des Roles SpamAssasinĪ phrase in the email body has been found that is commonly found in advance fee fraud spam.

Spamassassin exchange 2010