
84
Spam messages often take the form of pictures as another evasive
strategy applied against antispam detection methods. Such pictures
usually contain interactive links to web pages.
URL formatting hosting service domain
URL address contains the hosting service domain.
Message contains words typical for spam.
Email header inconsistency
Information in the header is altered to pose as a source other than the
original sender.
Message contains a suspicious attachment.
Message contains text that is typical to phishing messages.
Message contains text that is typical for a category of spam oriented at
offering replicas.
Message containing words/characters that is typical for spam, as e.g.
"Dear friend", "hello winner", "!!!" etc.
This is an indicator that has the opposite function as the other listed
indicators. It analyzes elements characteristic for regular solicited mail.
It lowers the overall spam score.
Non-specific spam indicator
Message contains other spam elements, such as base64 coding.
Other typical spam phrases.
URL in the message is on a blacklist.
IP address ... is on a RBL list.
URL address ... is on a DNSBL list.
URL %s is on RBL or the server is not
entitled to send mail
URL address ... is on a RBL list, or the server does not have the required
privileges to send email messages. Addresses which were part of the
email's route are verified against the RBL list. The last address is tested
regarding its connectivity rights to public mail servers. If it's impossible
to detect valid connectivity rights, the address is on the LBL list.
Messages marked as spam, because of an LBL indicator have the
following text stated in their Reason field: "server is not entitled to send
mail".
Action – action performed on the message. Possible actions:
No action has been performed on the message.
Message was moved into quarantine.
The virus had been removed from the message and the message was quarantined.
Message was denied and the SMTP reject answer sent to the sender.
Message was deleted using silent drop .
Received – time the message was received by the server.
NOTE: If mails are received via an email server, the times in the Time and Received fields are practically identical.
19
19
Comentarios a estos manuales