From: david on
My boss just got a short email message that was classified by Exchange as
UCE (SCL=8). He asked me why it was classified as spam. I looked at it, and
I don't know either. I was wondering if anyone else could give me a hint as
to why this simple text message got an absurdly high SCL. SpamAssassan
gave it a rating of 0.0 This is what the headers say:

Microsoft Mail Internet Headers Version 2.0
Received: from mailnew._mydomain_.local ([10.1.70.5]) by _mydomain_.com.au
with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 18 May 2010 08:41:59 +1000
Received: by mailnew._mydomain_.local (Postfix, from userid 1000)
id B621C7EEC6; Tue, 18 May 2010 08:41:59 +1000 (EST)
Received: from ballast.engineroom.anchor.net.au (mx02.anchor.net.au
[202.4.234.229])
by mailnew._mydomain_.local (Postfix) with ESMTP id 4393C7EEC4
for <boss@_mydomain_.com.au>; Tue, 18 May 2010 08:41:59 +1000 (EST)
Received: from [10.___.___.48] (unknown [58.___.___.20])
(using TLSv1 with cipher AES128-SHA (128/128 bits))
(No client certificate requested)
(Authenticated sender: _hisdomain_1)
by ballast.engineroom.anchor.net.au (Postfix) with ESMTP id C4236911423
for <boss@_mydomain_.com.au>; Tue, 18 May 2010 08:41:58 +1000 (EST)
Message-Id: <36150451-9D54-4193-8A32-6FD282F44755@_hisdomain_.com.au>
From: _his_friend_ <him@_hisdomain_.com.au>
To: _my_boss_ <boss@_mydomain_.com.au>
Content-Type: text/plain;
charset=us-ascii;
format=flowed
Content-Transfer-Encoding: 7bit
X-Mailer: iPhone Mail (7C144)
Mime-Version: 1.0 (iPhone Mail 7C144)
Subject: The projector
Date: Tue, 18 May 2010 08:41:54 +1000
Return-Path: him@_hisdomain_.com.au
X-OriginalArrivalTime: 17 May 2010 22:41:59.0932 (UTC)
FILETIME=[297C0BC0:01CAF612]

Text:

"

Morning _myboss_

Would it be possible for you to bring along the projector again tonight?

Cheers

_his_friend_

"


From: Ed Crowley [MVP] on
It's from Australia. Everyone knows that all mail from Australia is spam.

Seriously, Microsoft's algorithm is a black box and a closely guarded trade
secret.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
..

"david" <david(a)nospam.au> wrote in message
news:emNMtEm9KHA.148(a)TK2MSFTNGP06.phx.gbl...
> My boss just got a short email message that was classified by Exchange as
> UCE (SCL=8). He asked me why it was classified as spam. I looked at it,
> and I don't know either. I was wondering if anyone else could give me a
> hint as to why this simple text message got an absurdly high SCL.
> SpamAssassan gave it a rating of 0.0 This is what the headers say:
>
> Microsoft Mail Internet Headers Version 2.0
> Received: from mailnew._mydomain_.local ([10.1.70.5]) by _mydomain_.com.au
> with Microsoft SMTPSVC(6.0.3790.4675);
> Tue, 18 May 2010 08:41:59 +1000
> Received: by mailnew._mydomain_.local (Postfix, from userid 1000)
> id B621C7EEC6; Tue, 18 May 2010 08:41:59 +1000 (EST)
> Received: from ballast.engineroom.anchor.net.au (mx02.anchor.net.au
> [202.4.234.229])
> by mailnew._mydomain_.local (Postfix) with ESMTP id 4393C7EEC4
> for <boss@_mydomain_.com.au>; Tue, 18 May 2010 08:41:59 +1000 (EST)
> Received: from [10.___.___.48] (unknown [58.___.___.20])
> (using TLSv1 with cipher AES128-SHA (128/128 bits))
> (No client certificate requested)
> (Authenticated sender: _hisdomain_1)
> by ballast.engineroom.anchor.net.au (Postfix) with ESMTP id C4236911423
> for <boss@_mydomain_.com.au>; Tue, 18 May 2010 08:41:58 +1000 (EST)
> Message-Id: <36150451-9D54-4193-8A32-6FD282F44755@_hisdomain_.com.au>
> From: _his_friend_ <him@_hisdomain_.com.au>
> To: _my_boss_ <boss@_mydomain_.com.au>
> Content-Type: text/plain;
> charset=us-ascii;
> format=flowed
> Content-Transfer-Encoding: 7bit
> X-Mailer: iPhone Mail (7C144)
> Mime-Version: 1.0 (iPhone Mail 7C144)
> Subject: The projector
> Date: Tue, 18 May 2010 08:41:54 +1000
> Return-Path: him@_hisdomain_.com.au
> X-OriginalArrivalTime: 17 May 2010 22:41:59.0932 (UTC)
> FILETIME=[297C0BC0:01CAF612]
>
> Text:
>
> "
>
> Morning _myboss_
>
> Would it be possible for you to bring along the projector again tonight?
>
> Cheers
>
> _his_friend_
>
> "
>
>