You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Paul Griffith <pa...@cse.yorku.ca> on 2007/07/17 14:39:35 UTC

exim and spamd -vs- commandline spamassassin -t why does the scores varies ?

Greetings,

I am trying to trackdown why some spam is scoring the way it is. Take a  
look at the sample header at the end of the e-mail.

Using spamd and exim I will get a score of 2.6, but in if I call  
spamassassin from the command line I get a score of 8.1.

via exim/spamd

X-Spam-Checker-Version: SpamAssassin 3.2.1 (2007-05-02) on  
bronze.cs.yorku.ca
X-Spam-Level: **
X-Spam-Status: No, score=2.6 required=2.7 tests=DATE_IN_PAST_03_06,
	DRUGS_ERECTILE,RCVD_IN_PBL,RDNS_NONE,STOX_REPLY_TYPE autolearn=disabled
	version=3.2.1

via commandline

spamassassin -t < spam1.mbs

Content analysis details:   (8.1 points, 2.7 required)

  pts rule name              description
---- ----------------------  
--------------------------------------------------
  0.0 STOX_REPLY_TYPE        STOX_REPLY_TYPE
  0.1 RDNS_NONE              Delivered to trusted network by a host with no  
rDNS
  1.5 FH_RELAY_NODNS         We could not determine your Reverse DNS
  0.5 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [84.222.168.64 listed in zen.spamhaus.org]
  4.0 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
  1.4 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
  0.6 DRUGS_ERECTILE         Refers to an erectile drug


This is not the first time, this has happened. I have four spam e-mails  
that  I have spam that are scored 1.8 via spamd and exim, but on the  
commandline spamassassin -t < spam-email I get a score of 23.

Any tips or pointers ?



---------------------------
From: "Adan Chambers" <a....@cato.com.au>
To: <te...@cs.yorku.ca>
Subject: Order Viagra N0_PRES needed with fast shipping!
Date: Mon, 16 Jul 2007 11:44:54 -0400
MIME-Version: 1.0
Content-Type: text/plain;
	format=flowed;
	charset="windows-1250"
	reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
------

This scored 23.1 via the commandline.

X-Spam-Level: *
X-Spam-Status: No, score=1.8 required=2.7 tests=RCVD_IN_PBL,
	RCVD_IN_WHOIS_INVALID,RDNS_NONE autolearn=disabled version=3.2.1
Received: from [220.129.142.109] (helo=xipzgtwr)
	by bronze.cs.yorku.ca with smtp (Exim 4.67)
	(envelope-from <aq...@typepad.com>)
	id 1IAbAu-00014W-6d; Mon, 16 Jul 2007 20:44:25 -0400
To: <st...@cs.yorku.ca>
From: "Jeannette Larita" <aq...@typepad.com>
Subject: Men's Sexual Health Pill from $1.50  per pill, Pain Relief,  
Anti-Anxiety/Sleep fzun
Message-ID: <21...@typepad.com>