Bug 5902 - HABEAS_ACCREDITED_SOI gets -4.3, but habeas accredits spammers
Summary: HABEAS_ACCREDITED_SOI gets -4.3, but habeas accredits spammers
Status: RESOLVED WORKSFORME
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: Rules (show other bugs)
Version: 3.2.4
Hardware: PC NetBSD
: P3 normal
Target Milestone: Undefined
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-05-07 13:49 UTC by Greg Troxel
Modified: 2008-06-10 14:32 UTC (History)
1 user (show)


Attachment Type Modified Status Actions Submitter/CLA Status
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Greg Troxel 2008-05-07 13:49:30 UTC 
I got the following spam, which wrongly claims to be opt-in.  Spamassassin gave it -4.3 points for being accredited by Habeas, and this seems entirely unwarranted.  I have asked habeas what is going on in this case and will update the bug as I get an answer.  It is interesting that the messsage is both habeas-accredited and in the URIBL.

Return-Path: <itsjoffers@solpubss.com>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on linuxpal.mit.edu
X-Spam-Level: **
X-Spam-Status: Yes, score=2.9 required=1.0 tests=AWL,BAYES_99,
        DATE_IN_PAST_03_06,HABEAS_ACCREDITED_SOI,HTML_MESSAGE,MIME_HTML_ONLY,
        URIBL_BLACK autolearn=no version=3.2.4
X-Spam-Report:
        * -4.3 HABEAS_ACCREDITED_SOI RBL: Habeas Accredited Opt-In or Better
        *      [63.149.233.41 listed in sa-accredit.habeas.com]
        *  2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
        *      [URIs: solutionlists.com]
        *  3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
        *      [score: 1.0000]
        *  0.0 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
        *  0.0 HTML_MESSAGE BODY: HTML included in message
        *  1.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
        *  0.7 AWL AWL: From: address is in the auto white-list
X-Original-To: GDT@LEXORT.COM
Delivered-To: gdt@linuxpal.mit.edu
Received: from Outbound-Two.nuos.com (outbound-two.nuos.com [63.149.233.41])
        by linuxpal.mit.edu (Postfix) with SMTP id B382716DF8
        for <GDT@LEXORT.COM>; Wed,  7 May 2008 16:23:23 -0400 (EDT)
Message-ID: <63342008537163853646@solpubss.com>
X-EM-Version: 5, 0, 0, 4
X-EM-Registration: #01E0530610F50E00AC00
From: "IT Solution Journal" <itsjoffers@solpubss.com>
To: "GREGORY TROXEL" <GDT@LEXORT.COM>
Subject: As the leader in hosting, Rackspace creates solutions built to fit your needs
Date: Wed, 7 May 2008 09:38:53 -0700
MIME-Version: 1.0
Content-Type: text/html

(body omitted)
Comment 1 Theo Van Dinter 2008-05-07 14:44:57 UTC 
Things are working as they're supposed to here.  If a Habeas accredited system is sending out spam, then reporting to them should get it handled, ideally through monetary means followed possibly by removal from the whitelist (unless sender fixes their issue).

So I'm closing this ticket.
Comment 2 Greg Troxel 2008-05-07 15:46:21 UTC 
This is actually the second time recently I have received spam from a habeas-accredited sender, and habeas did not reply to my complaint.  What is the procedure within spamassassin for evaluating whether habeas's accreditations continue to be valid?

eturn-Path: <itsjoffers@solpubss.com>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on linuxpal.mit.edu
X-Spam-Level: ***
X-Spam-Status: Yes, score=3.7 required=1.0 tests=AWL,BAYES_99,                  
        DATE_IN_PAST_24_48,HABEAS_ACCREDITED_SOI,HTML_IMAGE_RATIO_04,HTML_MESSA\
GE,                                                                             
        MIME_HTML_ONLY,URIBL_BLACK autolearn=no version=3.2.4
X-Spam-Report:                                                                  
        *  3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%           
        *      [score: 1.0000]                                                  
        *  1.2 DATE_IN_PAST_24_48 Date: is 24 to 48 hours before Received: date
        *  0.2 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image \
area                                                                            
        *  0.0 HTML_MESSAGE BODY: HTML included in message                      
        *  1.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts       
        * -4.3 HABEAS_ACCREDITED_SOI RBL: Habeas Accredited Opt-In or Better    
        *      [63.149.233.41 listed in sa-accredit.habeas.com]                 
        *  2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist        
        *      [URIs: solutionlists.com]                                        
        *  0.2 AWL AWL: From: address is in the auto white-list
X-Original-To: GDT@LEXORT.COM
Delivered-To: gdt@linuxpal.mit.edu
Received: from Outbound-Two.nuos.com (outbound-two.nuos.com [63.149.233.41])    
        by linuxpal.mit.edu (Postfix) with SMTP id DCC5116E33                   
        for <GDT@LEXORT.COM>; Sat, 22 Mar 2008 22:04:50 -0400 (EDT)
Message-ID: <6334200835215145104@solpubss.com>
X-EM-Version: 5, 0, 0, 4
X-EM-Registration: #01E0530610F50E00AC00
From: "IT Solution Journal" <itsjoffers@solpubss.com>
To: "GREGORY TROXEL" <GDT@LEXORT.COM>
Subject: Introducing CDW Days of Savings 
Date: Thu, 20 Mar 2008 22:14:05 -0700
MIME-Version: 1.0
Content-Type: text/html; charset=US-ASCII

and the unanswered complaint:

From: Greg Troxel <gdt@work.lexort.com>
Subject: spam labeled as optin by habeas
To: support@habeas.com, webadmin@cdw.com
Cc: Greg Troxel <gdt@work.lexort.com>
Date: Sun, 23 Mar 2008 09:32:12 -0400                                           

habeas:

I received the following spam, and have never had anything to do with
solutionlist.  Please explain what's going on - is this new bad behavior
from an accredited sender, or should I file a bug with spamassassin to
remove the rule giving negative points for HABEAS_ACCREDITED_SOI?
Comment 3 Karsten Bräckelmann 2008-05-20 06:11:30 UTC 
(In reply to comment #0)
>         * -4.3 HABEAS_ACCREDITED_SOI RBL: Habeas Accredited Opt-In or Better
>         *      [63.149.233.41 listed in sa-accredit.habeas.com]

Just to add fuel to the fire, from a recent reply on the dev list:

> [...] We have encourage and recommend that they convert
> to a confirm opt-in methodology of acquiring information.

Opt-in without confirmation or at the very least authentication first is worthless. In case the "Opt-In or Better" actually includes "subscribing arbitrary addresses", the score should be 0 accordingly.

Since Habeas folks obviously are reading the dev list, maybe they want to chip in and clarify the above...
Comment 4 Greg Troxel 2008-05-20 06:33:16 UTC 
habeas claims that the spammer in question received a "registration" in 2003 in connection with a print magazine subscription together with a web hosting package, but did not identify the vendors.  I've asked for further details, but from the data that habeas provided it seems obvious that my information was taken from a domain registration.  The notion that something in 2003 gives permission for spamming in 2008 is beyond credible.
Comment 5 Greg Troxel 2008-05-20 17:58:48 UTC 
Habeas now says the sender has mailed to a list which "did not give explicit consent on receiving emails", but also that no other complaints have been received.

If any of you have spam from solutionlist.com, solpubss.com, or outbound via nuos.com and it's HABEAS_ACCREDITED, please complain to complaints@habeas.com.

I think it's still a legitimate question why HABEAS_ACCREDITED_SOI mail gets a pass, and how habeas's performance is validated.
Comment 6 Eloise Carlton 2008-05-22 19:06:41 UTC 
We reviewed and audited the sender's mailing practice early this year and no abuse or mal-practice was observed. And further investigation have yield that your address was acquired via a co-registration program in collaboration with Network Solutions for the sender's print publication, "IT Solution Journal" back in 2003. We do not accredidate this type of practice. Hence we have removed them from the HABEAS_ACCREDITED_SOI list until they change some of their practices.
 
Please feel free to send suspected spam to complaints@habeas.com and we'll be happy to investigate them.
Comment 7 Justin Mason 2008-05-23 01:37:03 UTC 
(In reply to comment #5)
> I think it's still a legitimate question why HABEAS_ACCREDITED_SOI mail gets a
> pass, and how habeas's performance is validated.

we monitor Habeas' performance using our rule-QA system, same way as we monitor any rule's performance.  right now, the current stats are:

0.00000   0.0002   0.3610   0.001    0.60    0.00  HABEAS_ACCREDITED_SOI  
0.00000   0.0002   0.0587   0.003    0.52    0.00  HABEAS_ACCREDITED_COI  

http://ruleqa.spamassassin.org/?daterev=20080517-r657323-n&rule=%2FHABEAS

that's 0.0002% of the spam corpora hitting the HABEAS rules -- specifically, 3 messages for each rule out of the 1.6m-message corpus.  As far as I'm concerned, that's reasonably acceptable...
Comment 8 Alain Kelder 2008-06-09 12:18:52 UTC 
Spam message below was sent to a spam trap address posted on a website. That email address is not used for any other purpose, so sender clearly harvested it off my website.

Habeas KB article (http://www.habeas.com/en-US/Support/Knowledge-Base/SafeList/What-do-I-do-if-I-receive-spam-from-a-Habeas-Safelisted-licensee/) suggests that problems reports can be made at http://www.habeas.com/feedback, yet that page doesn't exist (their web server returns "404 Page not found").

I don't trust Habeas enough to forward the spam below using my real email address and don't want to bother to create a throw away address to help a company that displays such suspect behavior.

------------ spam message ------------

Return-Path: <gotb1245496_1244412_855402_1375882813@cmpgnr.com>
Received: from [REMOVED] ([unix socket])
	 by [REMOVED] (Cyrus v2.2.12) with LMTPA;
	 Mon, 09 Jun 2008 05:37:42 -0700
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost [127.0.0.1])
	by [REMOVED] with ESMTP id 1789141CEC
	for [REMOVED]; Mon,  9 Jun 2008 05:37:42 -0700 (PDT)
Received: from [REMOVED] ([127.0.0.1])
 by localhost ([REMOVED] [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 24675-10 for <[REMOVED]>;
 Mon,  9 Jun 2008 05:37:25 -0700 (PDT)
Received: from mta14br.cmpgnr.com (mta14br.cmpgnr.com [216.24.227.14])
	by [REMOVED]) with SMTP id C4E7141CEA
	for [REMOVED]; Mon,  9 Jun 2008 05:37:24 -0700 (PDT)
Message-ID: <12025055.1213015041628.KadaSegment.237.1@mta14br.cmpgnr.com>
Date: Mon, 9 Jun 2008 08:37:21 -0400 (EDT)
From: Macho Products <anneC@macho.com>
Reply-To: "Macho Products" <Macho_Products_rsgggrs@cmpgnr.com>
To: [REMOVED]
Subject: More Products. More Macho.
Errors-To: gotb1245496_1244412_855402_1375882813@cmpgnr.com
Mime-Version: 1.0
Content-Type: multipart/alternative; 
	boundary="----=_Part_663809_19094345.1213015041621"
X-Campaign: 1245496.1244412.855402.1375882813
Bounces-To: gotb1245496_1244412_855402_1375882813@cmpgnr.com
X-Virus-Scanned: amavisd-new at [REMOVED]
X-Spam-Status: No, score=-0.107 tagged_above=-9999
 tests=[HABEAS_ACCREDITED_SOI=-4.3, HTML_IMAGE_RATIO_02=0.192,
 HTML_MESSAGE=0.001, SPAMTRAP=4]
X-Spam-Score: -0.107
X-Spam-Level: 

------=_Part_663809_19094345.1213015041621
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

If you can read this message, your email program doesn't currently support HTML-based messages.  To read this message, please visit:
http://cmpgnr.com/r.html?c=1245496&r=1244412&t=1375882813&l=1&d=89718115&u=http%3a%2f%2fwww%2emacho%2ecom%2fmailer%2fnewprospects%2fnewpros%2dretail%5f6%2d6%2d08%2ehtml&g=0&f=-1

You are subscribed as [REMOVED]. To unsubscribe please click here: http://cmpgnr.com/r.html?c=1245496&r=1244412&t=1375882813&l=6&ea=[REMOVED]&la=1&o=-75.

This mailer was created with Campaigner.
http://www.campaigner.com/?testdrive_0
------=_Part_663809_19094345.1213015041621
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable


<html><body><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" =
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns=3D"http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1" />
<meta name=3D"keywords" content=3D"Artes Marciales, Artes marciales Macho, =
Equipo Artes Marciales, Articulos Artes Marciales, Articulos Rebajados Arte=
s Marciales, Equipo Protector Artes Marciales, Equipo Protector Combate, Eq=
uipo Sparring Artes Marciales, Uniformes Artes Marciales, Uniformes Karate,=
 Uniformes Adidas, Uniformes Taekwondo, Armas Artes Marciales, Surtido Arte=
s Marciales, Equipo Protector Atletico, Material Atletico, Articulos Atleti=
cos, Equipamiento Atletico, Equipamiento Protector, Equipamiento Artes Marc=
iales, Equipamiento Protector Artes Marciales,  Equipos Accesorios Artes Ma=
rciales, Equipamiento Combate, Suministro Artes Marciales, Fabricante unifo=
rmes Artes Marciales, Fabricante Material Artes Marciales, Fabricante Artic=
ulos Artes Marciales, Fabrica Artes Marciales, Fabrica Equipos Artes Marcia=
les, Fabrica Material Artes Marciales, Fabrica Uniformes Artes Marciales, D=
istribuidor Artes Marciales, Distribuidor Global Artes Marciales, Distribuc=
ion International Artes Marciales, Exportador Artes Marciales, Importador A=
rtes Marciales, Comercial Artes Marciales, Ventas Articulos Artes Marciales=
, Venta al por Mayor Articulos Artes Marciales, Venta Directa articulos Art=
es Marciales, Venta Directa Equipos Artes Marciales, Uniformes Academias Ar=
tes Marciales" />
<meta name=3D"description" content=3D"Macho Martial Arts, recognized in the=
 martial arts industry for designing the highest quality sparring gear now =
carries a much larger selection of martial arts supplies. Martial arts unif=
orms for taekwondo, karate, judo, jiujitsu and more. Find  weapons, mma, gr=
appling, apparel and training products now at macho.com. Where the best get=
s even better." />
<title>Macho Martial Arts Special Promotion </title>
</head>

<body leftmargin=3D"0" topmargin=3D"0" marginheight=3D"0" marginwidth=3D"0"=
>
<table cellpadding=3D"0" cellspacing=3D"0" border=3D"0" width=3D"600">
<tr>
=09<td valign=3D"top" align=3D"left"><img src=3D"http://www.macho.com/upima=
ges/header-ret-4-2-08.jpg" width=3D"375" height=3D"82" hspace=3D"0" vspace=
=3D"0" border=3D"0" alt=3D"macho, martial arts, macho martial arts, martial=
 arts equipment, martial arts supplies, discount martial arts supplies, mar=
tial arts sparring gear, martial arts uniforms, karate uniforms, adidas uni=
forms, taekwondo uniforms, martial arts weapons, mixed martial arts, mma, k=
arate, kung fu, taekwondo, tkd, aau taekwondo, aau, protective athletic equ=
ipment, athletic equipment, protective gear" /></td>
=09<td valign=3D"top" align=3D"right"><table border=3D"0" cellpadding=3D"0"=
 cellspacing=3D"0" width=3D"225">
=09<tr>
=09=09<td height=3D"10" valign=3D"bottom" align=3D"right"><a href=3D"http:/=
/cmpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D8971810=
0&u=3Dhttp%3a%2f%2fwww%2emacho%2ecom&g=3D0&f=3D-1" target=3D"_blank"><img s=
rc=3D"http://www.macho.com/upimages/cartbttn-ret-4-2-08.jpg" width=3D"100" =
height=3D"27" hspace=3D"0" vspace=3D"0" border=3D"0" alt=3D"macho, martial =
arts, macho martial arts, martial arts equipment, martial arts supplies, di=
scount martial arts supplies, martial arts sparring gear, martial arts unif=
orms, karate uniforms, adidas uniforms, taekwondo uniforms, martial arts we=
apons, mixed martial arts, mma, karate, kung fu, taekwondo, tkd, aau taekwo=
ndo, aau, protective athletic equipment, athletic equipment, protective gea=
r" /></a></td>
=09</tr>
=09<tr>
=09=09<td colspan=3D"2" height=3D"10"><img src=3D"http://www.macho.com/upim=
ages/white-spacer.gif" width=3D"225" height=3D"5" hspace=3D"0" vspace=3D"0"=
 border=3D"0" alt=3D"macho, martial arts, macho martial arts, martial arts =
equipment, martial arts supplies, discount martial arts supplies, martial a=
rts sparring gear, martial arts uniforms, karate uniforms, adidas uniforms,=
 taekwondo uniforms, martial arts weapons, mixed martial arts, mma, karate,=
 kung fu, taekwondo, tkd, aau taekwondo, aau, protective athletic equipment=
, athletic equipment, protective gear" /></td>
=09</tr>
=09<tr>
=09=09<td valign=3D"top" align=3D"right" width=3D"213"><font face=3D"Arial,=
 Helvetica, sans-serif" style=3D"font-size:14px" color=3D"#000000"><a href=
=3D"http://cmpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=
=3D89718100&u=3Dhttp%3a%2f%2fwww%2emacho%2ecom&g=3D0&f=3D-1" target=3D"_bla=
nk">Log-in</a></font></td>
=09=09<td rowpsan=3D"5"><img src=3D"http://www.macho.com/upimages/white-spa=
cer.gif" width=3D"12" height=3D"1" hspace=3D"0" vspace=3D"0" border=3D"0" a=
lt=3D"macho, martial arts, macho martial arts, martial arts equipment, mart=
ial arts supplies, discount martial arts supplies, martial arts sparring ge=
ar, martial arts uniforms, karate uniforms, adidas uniforms, taekwondo unif=
orms, martial arts weapons, mixed martial arts, mma, karate, kung fu, taekw=
ondo, tkd, aau taekwondo, aau, protective athletic equipment, athletic equi=
pment, protective gear" /></td>
=09</tr>
=09<tr>
=09=09<td colspan=3D"2" height=3D"10"><img src=3D"http://www.macho.com/upim=
ages/white-spacer.gif" width=3D"225" height=3D"5" hspace=3D"0" vspace=3D"0"=
 border=3D"0" alt=3D"macho, martial arts, macho martial arts, martial arts =
equipment, martial arts supplies, discount martial arts supplies, martial a=
rts sparring gear, martial arts uniforms, karate uniforms, adidas uniforms,=
 taekwondo uniforms, martial arts weapons, mixed martial arts, mma, karate,=
 kung fu, taekwondo, tkd, aau taekwondo, aau, protective athletic equipment=
, athletic equipment, protective gear" /></td>
=09</tr>
=09<tr>
=09=09<td valign=3D"top" align=3D"right"><font face=3D"Arial, Helvetica, sa=
ns-serif" style=3D"font-size:14px" color=3D"#000000"><a href=3D"http://cmpg=
nr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718100&u=
=3Dhttp%3a%2f%2fwww%2emacho%2ecom&g=3D0&f=3D-1" target=3D"_blank">www.macho=
.com</a></font></td></tr></table>
=09</td>

</tr>
<tr>
=09<td colspan=3D"2" valign=3D"top" align=3D"left"><img src=3D"http://www.m=
acho.com/upimages/blue-spacer-3-17-08.jpg" width=3D"600" height=3D"1" hspac=
e=3D"0" vspace=3D"0" border=3D"0" alt=3D"macho, martial arts, macho martial=
 arts, martial arts equipment, martial arts supplies, discount martial arts=
 supplies, martial arts sparring gear, martial arts uniforms, karate unifor=
ms, adidas uniforms, taekwondo uniforms, martial arts weapons, mixed martia=
l arts, mma, karate, kung fu, taekwondo, tkd, aau taekwondo, aau, protectiv=
e athletic equipment, athletic equipment, protective gear" /></td>=09
</tr>
<tr>
=09<td colspan=3D"2" valign=3D"top" align=3D"left"><img src=3D"http://www.m=
acho.com/upimages/headertag-pd_whs_3-17-08.jpg" hspace=3D"0" vspace=3D"0" b=
order=3D"0" /></td>=09
</tr>
<tr>
=09<td colspan=3D"2" valign=3D"top" align=3D"left"><table cellpadding=3D"0"=
 cellspacing=3D"0" border=3D"0" width=3D"600">
=09<tr>
=09=09<td><img src=3D"http://www.macho.com/upimages/white-spacer.gif" width=
=3D"15" height=3D"1" hspace=3D"0" vspace=3D"0" border=3D"0" alt=3D"macho, m=
artial arts, macho martial arts, martial arts equipment, martial arts suppl=
ies, discount martial arts supplies, martial arts sparring gear, martial ar=
ts uniforms, karate uniforms, adidas uniforms, taekwondo uniforms, martial =
arts weapons, mixed martial arts, mma, karate, kung fu, taekwondo, tkd, aau=
 taekwondo, aau, protective athletic equipment, athletic equipment, protect=
ive gear" /></td>
=09=09<td valign=3D"top" align=3D"left"><font face=3D"Arial, Helvetica, san=
s-serif" style=3D"font-size:13px" color=3D"#676768"><a href=3D"http://cmpgn=
r.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718106&u=3D=
http%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%26id%3d1=
0000076&g=3D0&f=3D-1" target=3D"_blank">Sparring Gear</a></font></td>
=09=09<td valign=3D"top" align=3D"left"><font face=3D"Arial, Helvetica, san=
s-serif" style=3D"font-size:13px" color=3D"#676768"><a href=3D"http://cmpgn=
r.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718104&u=3D=
http%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%26id%3d1=
0000027&g=3D0&f=3D-1" target=3D"_blank">Uniforms</a></font></td>
=09=09<td valign=3D"top" align=3D"left"><font face=3D"Arial, Helvetica, san=
s-serif" style=3D"font-size:13px" color=3D"#676768">=A0=A0<a href=3D"http:/=
/cmpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D8971810=
1&u=3Dhttp%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%26=
id%3d10000003&g=3D0&f=3D-1" target=3D"_blank">Belts</a></font></td>
=09=09<td valign=3D"top" align=3D"middle"><font face=3D"Arial, Helvetica, s=
ans-serif" style=3D"font-size:13px" color=3D"#676768">=A0=A0<a href=3D"http=
://cmpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718=
112&u=3Dhttp%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%=
26id%3d10000242&g=3D0&f=3D-1" target=3D"_blank">Training Equipment</a></fon=
t></td>
=09=09<td valign=3D"top" align=3D"left"><font face=3D"Arial, Helvetica, san=
s-serif" style=3D"font-size:13px" color=3D"#676768">=A0<a href=3D"http://cm=
pgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718113&u=
=3Dhttp%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%26id%=
3d10002027&g=3D0&f=3D-1" target=3D"_blank">Training Aids</a></font></td>
=09=09<td valign=3D"top" align=3D"left"><font face=3D"Arial, Helvetica, san=
s-serif" style=3D"font-size:13px" color=3D"#676768">=A0=A0<a href=3D"http:/=
/cmpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D8971811=
0&u=3Dhttp%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%26=
id%3d10000162&g=3D0&f=3D-1" target=3D"_blank">Brands</a></font></td>
=09=09<td valign=3D"top" align=3D"right"><font face=3D"Arial, Helvetica, sa=
ns-serif" style=3D"font-size:13px" color=3D"#676768">=A0<a href=3D"http://c=
mpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718102&=
u=3Dhttp%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%26id=
%3d10000011&g=3D0&f=3D-1" target=3D"_blank">Clearance</a></font></td>
=09=09<td><img src=3D"http://www.macho.com/upimages/white-spacer.gif" width=
=3D"15" height=3D"1" hspace=3D"0" vspace=3D"0" border=3D"0" alt=3D"macho, m=
artial arts, macho martial arts, martial arts equipment, martial arts suppl=
ies, discount martial arts supplies, martial arts sparring gear, martial ar=
ts uniforms, karate uniforms, adidas uniforms, taekwondo uniforms, martial =
arts weapons, mixed martial arts, mma, karate, kung fu, taekwondo, tkd, aau=
 taekwondo, aau, protective athletic equipment, athletic equipment, protect=
ive gear" /></td>
=09</tr></table></td></tr>
=09<tr>
=09<tr><td colspan=3D"2"><img src=3D"http://www.macho.com/upimages/lines_wh=
s_3-17-08.jpg" hspace=3D"0" vspace=3D"0" border=3D"0" /></td></tr>

<tr>=09
=09<td colspan=3D"2" valign=3D"top" align=3D"left"><table cellpadding=3D"0"=
 cellspacing=3D"0" border=3D"0" width=3D"600">
=09<tr>
=09=09<td><img src=3D"http://www.macho.com/upimages/white-spacer.gif" width=
=3D"15" height=3D"1" hspace=3D"0" vspace=3D"0" border=3D"0" alt=3D"macho, m=
artial arts, macho martial arts, martial arts equipment, martial arts suppl=
ies, discount martial arts supplies, martial arts sparring gear, martial ar=
ts uniforms, karate uniforms, adidas uniforms, taekwondo uniforms, martial =
arts weapons, mixed martial arts, mma, karate, kung fu, taekwondo, tkd, aau=
 taekwondo, aau, protective athletic equipment, athletic equipment, protect=
ive gear" /></td>
=09=09<td valign=3D"top" align=3D"left"><font face=3D"Arial, Helvetica, san=
s-serif" style=3D"font-size:13px" color=3D"#676768"><a href=3D"http://cmpgn=
r.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718111&u=3D=
http%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%26id%3d1=
0000210&g=3D0&f=3D-1" target=3D"_blank">Apparel</a>=A0=A0</font></td>
=09=09<td valign=3D"top" align=3D"left"><font face=3D"Arial, Helvetica, san=
s-serif" style=3D"font-size:13px" color=3D"#676768">=A0<a href=3D"http://cm=
pgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718103&u=
=3Dhttp%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%26id%=
3d10000026&g=3D0&f=3D-1" target=3D"_blank">Taekwondo</a></font></td>
=09=09<td valign=3D"top" align=3D"middle"><font face=3D"Arial, Helvetica, s=
ans-serif" style=3D"font-size:13px" color=3D"#676768">=A0=A0<a href=3D"http=
://cmpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718=
109&u=3Dhttp%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%=
26id%3d10000158&g=3D0&f=3D-1" target=3D"_blank">Weapons</a></font></td>
=09=09<td valign=3D"top" align=3D"left"><font face=3D"Arial, Helvetica, san=
s-serif" style=3D"font-size:13px" color=3D"#676768">=A0=A0=A0<a href=3D"htt=
p://cmpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D8971=
8108&u=3Dhttp%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO=
%26id%3d10000080&g=3D0&f=3D-1" target=3D"_blank">Shoes</a></font></td>
=09=09<td valign=3D"top" align=3D"left"><font face=3D"Arial, Helvetica, san=
s-serif" style=3D"font-size:13px" color=3D"#676768">=A0=A0<a href=3D"http:/=
/cmpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D8971810=
7&u=3Dhttp%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%26=
id%3d10000079&g=3D0&f=3D-1" target=3D"_blank">Accessories</a></font></td>
=09=09<td valign=3D"top" align=3D"left"><font face=3D"Arial, Helvetica, san=
s-serif" style=3D"font-size:13px" color=3D"#676768">=A0<a href=3D"http://cm=
pgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718114&u=
=3Dhttp%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%26id%=
3d10002093&g=3D0&f=3D-1" target=3D"_blank">MMA</a></font></td>
=09=09<td valign=3D"top" align=3D"right"><font face=3D"Arial, Helvetica, sa=
ns-serif" style=3D"font-size:13px" color=3D"#676768">=A0<a href=3D"http://c=
mpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718105&=
u=3Dhttp%3a%2f%2fwww%2emacho%2ecom%2fcategory%2easpx%3fcatalog%3dMACHO%26id=
%3d10000029&g=3D0&f=3D-1" target=3D"_blank">Promotional Items</a></font></t=
d>
=09=09<td><img src=3D"http://www.macho.com/upimages/white-spacer.gif" width=
=3D"15" height=3D"1" hspace=3D"0" vspace=3D"0" border=3D"0" alt=3D"macho, m=
artial arts, macho martial arts, martial arts equipment, martial arts suppl=
ies, discount martial arts supplies, martial arts sparring gear, martial ar=
ts uniforms, karate uniforms, adidas uniforms, taekwondo uniforms, martial =
arts weapons, mixed martial arts, mma, karate, kung fu, taekwondo, tkd, aau=
 taekwondo, aau, protective athletic equipment, athletic equipment, protect=
ive gear" /></td>
=09</tr></table></td></tr>

<tr>
=09<td colspan=3D"2" valign=3D"top" align=3D"left"><img src=3D"http://www.m=
acho.com/upimages/whitespacer.jpg" hspace=3D"0" vspace=3D"0" border=3D"0" h=
eight=3D"5" width=3D"600" alt=3D"macho, martial arts, macho martial arts, m=
artial arts equipment, martial arts supplies, discount martial arts supplie=
s, martial arts sparring gear, martial arts uniforms, karate uniforms, adid=
as uniforms, taekwondo uniforms, martial arts weapons, mixed martial arts, =
mma, karate, kung fu, taekwondo, tkd, aau taekwondo, aau, protective athlet=
ic equipment, athletic equipment, protective gear" /></td>
</tr></table>
<tr>
=09<td colspan=3D"2"><table width=3D"600" border=3D"0" cellspacing=3D"0" ce=
llpadding=3D"0">
=09<tr>
=09=09<td colspan=3D"2" width=3D"600" valign=3D"top" align=3D"left"><a href=
=3D"http://cmpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=
=3D89718100&u=3Dhttp%3a%2f%2fwww%2emacho%2ecom&g=3D0&f=3D-1" target=3D"_bla=
nk"><img src=3D"http://www.macho.com/upimages/newpros-main-6-6-08.jpg" widt=
h=3D"600" height=3D"241" hspace=3D"0" vspace=3D"0" border=3D"0" alt=3D"mach=
o, martial arts, macho martial arts, martial arts equipment, martial arts s=
upplies, discount martial arts supplies, martial arts sparring gear, martia=
l arts uniforms, karate uniforms, adidas uniforms, taekwondo uniforms, mart=
ial arts weapons, mixed martial arts, mma, karate, kung fu, taekwondo, tkd,=
 aau taekwondo, aau, protective athletic equipment, athletic equipment, pro=
tective gear" /></a></td>
=09</tr>
=09<tr>
=09=09<td colspan=3D"2" width=3D"600" valign=3D"top" align=3D"left"><a href=
=3D"http://cmpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=
=3D89718100&u=3Dhttp%3a%2f%2fwww%2emacho%2ecom&g=3D0&f=3D-1" target=3D"_bla=
nk"><img src=3D"http://www.macho.com/upimages/newpros-mainsub-6-6-08.jpg" w=
idth=3D"600" height=3D"241" hspace=3D"0" vspace=3D"0" border=3D"0" alt=3D"m=
acho, martial arts, macho martial arts, martial arts equipment, martial art=
s supplies, discount martial arts supplies, martial arts sparring gear, mar=
tial arts uniforms, karate uniforms, adidas uniforms, taekwondo uniforms, m=
artial arts weapons, mixed martial arts, mma, karate, kung fu, taekwondo, t=
kd, aau taekwondo, aau, protective athletic equipment, athletic equipment, =
protective gear" /></a></td>
=09</tr>
=09<tr>
=09=09<td colspan=3D"2" valign=3D"top" align=3D"left"><a href=3D"http://cmp=
gnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718100&u=
=3Dhttp%3a%2f%2fwww%2emacho%2ecom&g=3D0&f=3D-1" target=3D"_blank"><img src=
=3D"http://www.macho.com/upimages/newpros-area2-6-6-08.jpg" width=3D"600" h=
eight=3D"316" hspace=3D"0" vspace=3D"0" border=3D"0" alt=3D"macho, martial =
arts, macho martial arts, martial arts equipment, martial arts supplies, di=
scount martial arts supplies, martial arts sparring gear, martial arts unif=
orms, karate uniforms, adidas uniforms, taekwondo uniforms, martial arts we=
apons, mixed martial arts, mma, karate, kung fu, taekwondo, tkd, aau taekwo=
ndo, aau, protective athletic equipment, athletic equipment, protective gea=
r" /></a></td>
=09</tr>
=09<tr>
=09=09<td colspan=3D"2" valign=3D"top" align=3D"left"><table width=3D"600" =
cellpadding=3D"0" cellspacing=3D"0" border=3D"0">
=09=09=09<tr>
=09=09=09=09<td valign=3D"top" align=3D"left"><a href=3D"mailto:annec@macho=
.com?subject=3DAn inquiry from our Special Promotion on June 6th, 2008"><im=
g src=3D"http://www.macho.com/upimages/newpros-area3a-6-6-08.jpg" width=3D"=
245" height=3D"218" hspace=3D"0" vspace=3D"0" border=3D"0" alt=3D"macho, ma=
rtial arts, macho martial arts, martial arts equipment, martial arts suppli=
es, discount martial arts supplies, martial arts sparring gear, martial art=
s uniforms, karate uniforms, adidas uniforms, taekwondo uniforms, martial a=
rts weapons, mixed martial arts, mma, karate, kung fu, taekwondo, tkd, aau =
taekwondo, aau, protective athletic equipment, athletic equipment, protecti=
ve gear" /></a></td>
=09=09=09=09<td valign=3D"top" align=3D"left"><a href=3D"http://cmpgnr.com/=
r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718116&u=3Dhttp%3=
a%2f%2fwww%2emacho%2ecom%2fwholesaleinfo%2easpx&g=3D0&f=3D-1"><img src=3D"h=
ttp://www.macho.com/upimages/newpros-area3b-6-6-08.jpg" width=3D"200" heigh=
t=3D"218" hspace=3D"0" vspace=3D"0" border=3D"0" /></a></td>
=09=09=09=09<td valign=3D"top" align=3D"left"><a href=3D"http://cmpgnr.com/=
r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718100&u=3Dhttp%3=
a%2f%2fwww%2emacho%2ecom&g=3D0&f=3D-1" target=3D"_blank"><img src=3D"http:/=
/www.macho.com/upimages/newpros-area3c-6-6-08.jpg" width=3D"155" height=3D"=
218" hspace=3D"0" vspace=3D"0" border=3D"0" alt=3D"macho, martial arts, mac=
ho martial arts, martial arts equipment, martial arts supplies, discount ma=
rtial arts supplies, martial arts sparring gear, martial arts uniforms, kar=
ate uniforms, adidas uniforms, taekwondo uniforms, martial arts weapons, mi=
xed martial arts, mma, karate, kung fu, taekwondo, tkd, aau taekwondo, aau,=
 protective athletic equipment, athletic equipment, protective gear" /></a>=

</td>
=09=09=09</tr></table></td></tr>
=09<tr>
=09=09<td colspan=3D"2" valign=3D"top" align=3D"left"><a href=3D"http://cmp=
gnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D1&d=3D89718100&u=
=3Dhttp%3a%2f%2fwww%2emacho%2ecom&g=3D0&f=3D-1" target=3D"_blank"><img src=
=3D"http://www.macho.com/upimages/newpros-footer-6-6-08.jpg" width=3D"600" =
height=3D"27" hspace=3D"0" vspace=3D"0" border=3D"0" alt=3D"macho, martial =
arts, macho martial arts, martial arts equipment, martial arts supplies, di=
scount martial arts supplies, martial arts sparring gear, martial arts unif=
orms, karate uniforms, adidas uniforms, taekwondo uniforms, martial arts we=
apons, mixed martial arts, mma, karate, kung fu, taekwondo, tkd, aau taekwo=
ndo, aau, protective athletic equipment, athletic equipment, protective gea=
r" /></a></td>
=09</tr>
=09
=09

</table></td>
</tr></table>



</body>
</html><br><FONT SIZE=3D"1" FACE=3D"Geneva,Arial,Helvetica,Swiss,SunSans-Re=
gular">You are subscribed as [REMOVED]. To unsubscribe please <a h=
ref=3D"http://cmpgnr.com/r.html?c=3D1245496&r=3D1244412&t=3D1375882813&l=3D=
6&ea=3D[REMOVED]&la=3D1&o=3D-75">click here</a>.<br><br><a href=3D=
"http://www.campaigner.com/?testdrive_1"><img src=3D"http://cmpgnr.com/camp=
aigner_images/Images/powered_by_campaigner.gif" border=3D"0"></a></font><br=
><br><img src=3D'http://cmpgnr.com/app/campaigner/trk/opn.jsp?cid=3D1245496=

&rid=3D1244412&ctd=3D1375882813&lid=3D89718117&g=3D0&f=3D-1' width=3D'2' he=
ight=3D'2' ><br></body></html>
------=_Part_663809_19094345.1213015041621--


------------ end spam message ------------
Comment 9 Alain Kelder 2008-06-09 13:13:43 UTC 
Searched through my caught spam and found another message which had the HABEAS_ACCREDITED_SOI SpamAssassin rule in the header. This one was was an unsolicited invite from Flixter sent to my regular email address and the "From", "Return-Path" and "Sender" all contained a valid Yahoo user whom I know (and who said he didn't send it to me nor uses flixter.com).

Since the only messages I have received so far with the HABEAS_ACCREDITED_SOI SA rule header are spam, presence of this header is a good indication that message is spam. If I keep getting these, I'll either modify the SA rule or add a Sieve rule to sort this Habeas accredited garbage into the folder it belongs in (trash).

SpamAssassin rocks and any anyone involved in the project is super awesome as far as I'm concerned, but this "reputation management service" Habeas seems suspect.

----------- spam message headers ---------------

Return-Path: [REAL.YAHOO.USER]
Received: from [REMOVED] ([unix socket])
	 by mail (Cyrus v2.2.12) with LMTPA;
	 Thu, 19 Apr 2007 12:26:16 -0700
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost [127.0.0.1])
	by [REMOVED] (Postfix) with ESMTP id C22832D9BF
	for [REMOVED]; Thu, 19 Apr 2007 12:26:16 -0700 (PDT)
Received: from [REMOVED] ([127.0.0.1])
 by localhost ([REMOVED] [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 02267-04 for [REMOVED];
 Thu, 19 Apr 2007 12:26:15 -0700 (PDT)
Received: from mail3.flixster.com (mail3.flixster.com [209.237.233.43])
	by [REMOVED] (Postfix) with ESMTP id D69B72D9BC
	for [REMOVED]; Thu, 19 Apr 2007 12:26:15 -0700 (PDT)
Received: from job06.flixster.com (job06.flixster.com [10.0.2.46])
	by mail3.flixster.com (Postfix) with ESMTP id D3D3A1CC9BA
	for [REMOVED]; Thu, 19 Apr 2007 12:26:17 -0700 (PDT)
Received: from [204.114.53.254] by www.flixster.com with HTTP;
	for [REMOVED]; 19 Apr 2007 12:25:43 PDT
Message-ID: <255607403.1177010770525.JavaMail.www@job06.flixster.com>
From: [REAL.YAHOO.USER]
Reply-To: bounce@flixster.com
Sender: [REAL.YAHOO.USER]
To: [REMOVED]
Subject: ***SPAM*** andrei has sent you a private message
MIME-Version: 1.0
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
Date: Thu, 19 Apr 2007 12:26:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at [REMOVED]
X-Spam-Status: Yes, score=5.067 tagged_above=-9999 required=4
 tests=[DCC_CHECK=4, DNS_FROM_RFC_ABUSE=0.479, DNS_FROM_RFC_POST=1.44,
 DNS_FROM_RFC_WHOIS=0.879, FORGED_YAHOO_RCVD=0.928,
 HABEAS_ACCREDITED_SOI=-4.3, HTML_IMAGE_ONLY_12=1.639, HTML_MESSAGE=0.001,
 MIME_HTML_ONLY=0.001]
X-Spam-Score: 5.067
X-Spam-Level: *****
X-Spam-Flag: YES

-------------- end spam message headers -------------
Comment 10 Sidney Markowitz 2008-06-10 12:54:55 UTC 
(reply to Comment #8 and comment #9)

The link http://www.habeas.com/feedback works for me now, redirecting to http://seal.habeas.com/Company_Feedback.php so I suggest you try it again. It says there "Habeas will maintain your anonymity and will only provide aggregated, anonymous feedback to the sender. Habeas will provide your email address to the sender only for the purpose of unsubscribing you from the email list." Earlier in the page you have the option of asking them to request you be unsubscribed, so that part about "provide your email address to the sender" is only if you have asked them to (default on the form is to not do so).

I still think the Habeas rule is working as designed unless we get some feedback that the occasional FP is not handled properly when reported to Habeas. Please follow through with these two spams and let us know the results. I know that mail to a spamtrap address and mail that your friend claims not to have sent looks bad, but the proof will be in how Habeas responds.
Comment 11 Eloise Carlton 2008-06-10 14:32:18 UTC 
(reply to Comment #8 and comment #9)

Flixster is a social network, currently a single opt-in stream and
Captcha is implemented to prevent bot abuse. The invite you received was
from a Flixster account holder that uploaded their address book. There
might be some sort of abuse here but without further details in the
header we are unable to investigate this. Any additional information you
could provide (offline or online) would help identify the source of the
abuse.

In addition there is already an investigation started on the mailer
mta14br.cmpgnr.com [216.24.227.14] and we are taking appropriate steps
to address this.

Thank you for taking the time to report this and in the future please
feel free to report it to complaints@habeas.com