some things get [mis-] labeled as Spam (was: Re: IPCOP)

[Craig White]

On Wed, 2007-02-07 at 19:55 -0700, Mike Schwartz wrote:

>         ----
>         I don't know how Google scored it - there didn't seem to be
>         anything 
>         amiss or that would cause it to score a big number with
>         spamassassin but
>         generally, spamassassin configuration would include the
>         scoring
>         information in the headers if it scored high enough to be
>         flagged as
>         spam. Thus if you want to contribute information back to the
>         OP - you 
>         should include the spamassassin scores which will indicate
>         which
>         rulesets marked it as spam.
>         
>         Craig
>         ---------------------------------------------------
>         PLUG-discuss mailing list - [...]
> 
> another comment from Mike:
> Maybe it had something to do with those "dotted quad" 
> IP addresses (which some e-mail systems, 
> including gmail apparently, turn in to clickable hyper 
> links, to a URL with  Prefix of "http://", and the IP
> address instead of a domain name, and just a "/"
> suffix).
>     Some Spam messages probably tend to contain
> URLs with a [numeric] IP address where the domain 
> name usually goes.  Maybe there is some robot "rule" 
> that "cries wolf" when it spots anything even remotely
> like that.  
>     It might also be affected by the fact that, going to
> the PLUG-Discuss list, it was probably seen many 
> times, that is, several copies of the message being
> sent to different subscribers.
>     Just a guess...
----
Mike - you missed my point.

There is no need/reason to guess at all.

Unless someone takes extra measures to prevent this (and it would be
foolish to do so), the actual scoring of an e-mail that is scored
sufficiently to register as spam will include the actual rules and the
score values for triggering those rules in the header and I know that
gmail has an option to view all of the header information (like all
other programs, the headers are minimized by default). If you choose to
view all of the headers, you will see the spamassassin scoring and can
report back specifically.

Why indulge in speculation when the reality is in front of you?

Craig