SpamAssassin Scores a message based on its features words, phrases, punctuation HTML, web bugs, colours, fonts tid-bits found in headers May also use external sources of information DNS blacklists Spam signature databases Features may be positive (spammy) or negative Higher total score, more likely spam