User Guide

Kaspersky Anti-Spam Operation and Filtering Philosophy 45
X-SpamTest-Method – This header is assigned by the hidden common profile
Analyze Message Headers or by the other common profiles in the messages
where spam attributes have been detected. (In the course of further
message processing these attributes may be considered as insufficient and
the message receives the Not Detected or Trusted status). It can possess
the following values:
• Local Lists – E-mail or IP address of a message sender occurred in one of
the black or white lists.
• Headers: ... (e.g., Headers: Suspicious To) – message headers contain
spam attributes; the text after the colon indicates which of the headers is
suspicious (header To in this case). The following options are possible:
• Suspicious From – The suspicious From header
• Suspicious Reply-To – The
Reply-To header
• Spamware Subject, Suspicious Subject – The last two options
refer to the
Subject header; in the former the spam probability is
higher.
• Spamware X-Mailer, Suspicious X-Mailer – Identically, for the
X-Mailer header
• Incompatible Headers – Suspicious headers combination
• Spamware Received – The
Received header characterized as
spam
• Eastern Codepage – A message in one of the "oriental"
encodings (Chinese, Korean, Japanese),
• etc.
• RBL: 'premium' list, RBL: 'reliable' list, RBL: 'standard' list – a message
sender is registered in one of RBL services included in the corresponding
lists beginning with the most reliable one.
• DNS: not in DNS – the originating server is not registered in DNS.
• Content: Spam, Content: Probable Spam – content analysis assigned the
SPAM or Probable Spam category to a message.
A message may have several
X-SpamTest-Method headers.
X-SpamTest-Info – a header with two different functions:
• First, each filter profile that processes a message marks this header.