You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris <cp...@embarqmail.com> on 2007/07/14 16:34:52 UTC
tests=[none]
Daily at least 2 or 3 spam show the above on my ISP's markup line. In the case
of the one above I show:
> X-Spam-Virus: Yes (Email.Spam.Gen983.Sanesecurity.07071002)
> X-Spam-Seen: Tokens 131
> X-Spam-New: Tokens 164
> X-Spam-Remote: Host localhost.localdomain
> X-Spam-ASN: AS4355 207.69.195.0/24
> X-Spam-Flag: YES
> X-Spam-Checker-Version: SpamAssassin 3.2.1 (2007-05-02) on
cpollock.localdomain
> X-Spam-Hammy: Tokens 0
> X-Spam-Status: Yes, score=24.4 required=5.0 tests=BAYES_99=5,CLAMAV=10,
> DATE_IN_PAST_03_06=0.044,DCC_CHECK=2.17,DIGEST_MULTIPLE=0.001,
> DKIM_POLICY_SIGNSOME=0,PYZOR_CHECK=3.7,RAZOR2_CF_RANGE_51_100=0.5,
> RAZOR2_CF_RANGE_E4_51_100=1.5,RAZOR2_CHECK=0.5,SAGREY=1,STOX_REPLY_TYPE=0.001
> autolearn=disabled version=3.2.1
> X-Spam-Spammy: Tokens 33
> X-Spam-Pyzor: Reported 677 times.
> X-Spam-DCC: cpollock 104; Body=many Fuz1=many Fuz2=many
Yet their markup shows:
> X-Virus-Scanned: amavisd-new at
> Old-X-Spam-Score: 0
> Old-X-Spam-Level:
> Old-X-Spam-Status: No, score=0 tagged_above=-10 required=6 tests=[none]
Their explaination for this is:
> It's not that they had no tests run, it's that they had all the tests run
> and the score came out as ZERO so no header was added.
> Jim...
>
That just doesn't sound right to me that all possible tests were run and there
were no hits, but I guess its possible.
--
Chris
KeyID 0xE372A7DA98E6705C
Re: tests=[none]
Posted by Jerry Durand <jd...@interstellar.com>.
At 09:36 AM 7/14/2007, Chris wrote:
>I realize they're not using the same tests or plug-ins as I am, i=
>t=20
>just doesn't make sense to me that an ISP could run all possible tests and=
>=20
>have none of them hit.
I just removed the max limit to scan messages from Amasd-new because
I came in today to a mailbox stuffed full of huge spam messages from
some Asian company. All had no tests due to the size. At least they
used their real name, they're now in my Postfix sender-reject file.
I wonder how much this will slow the server down, scanning large
messages? At least we don't service huge numbers of accounts like
most of you do.
--
Jerry Durand, Durand Interstellar, Inc. www.interstellar.com
tel: +1 408 356-3886, USA toll free: 1 866 356-3886
Skype: jerrydurand
Re: tests=[none]
Posted by Chris <cp...@embarqmail.com>.
On Saturday 14 July 2007 10:48 am, SM wrote:
> >Yet their markup shows:
> > > X-Virus-Scanned: amavisd-new at
> > > Old-X-Spam-Score: 0
> > > Old-X-Spam-Level:
> > > Old-X-Spam-Status: No, score=0 tagged_above=-10 required=6
> > > tests=[none]
> >
> >Their explaination for this is:
> > > It's not that they had no tests run, it's that they had all the tests
> > > run and the score came out as ZERO so no header was added.
> > > Jim...
> >
> >That just doesn't sound right to me that all possible tests were run
> >and there
> >were no hits, but I guess its possible.
>
> Are you assuming that the two configurations are identical? Yours
> has Bayes, DKIM verification, Pyzor and DCC enabled. They may not be
> be using those plugins.
>
> Regards,
> -sm
I know they're not using Bayes because it was so inacurate that they quit
using it. I realize they're not using the same tests or plug-ins as I am, it
just doesn't make sense to me that an ISP could run all possible tests and
have none of them hit.
--
Chris
KeyID 0xE372A7DA98E6705C
Re: tests=[none]
Posted by SM <sm...@resistor.net>.
At 07:34 14-07-2007, Chris wrote:
>Daily at least 2 or 3 spam show the above on my ISP's markup line.
>In the case
>of the one above I show:
>
> > X-Spam-Checker-Version: SpamAssassin 3.2.1 (2007-05-02) on
>cpollock.localdomain
> > X-Spam-Hammy: Tokens 0
> > X-Spam-Status: Yes, score=24.4 required=5.0 tests=BAYES_99=5,CLAMAV=10,
> > DATE_IN_PAST_03_06=0.044,DCC_CHECK=2.17,DIGEST_MULTIPLE=0.001,
> > DKIM_POLICY_SIGNSOME=0,PYZOR_CHECK=3.7,RAZOR2_CF_RANGE_51_100=0.5,
> >
> RAZOR2_CF_RANGE_E4_51_100=1.5,RAZOR2_CHECK=0.5,SAGREY=1,STOX_REPLY_TYPE=0.001
> > autolearn=disabled version=3.2.1
> > X-Spam-Spammy: Tokens 33
> > X-Spam-Pyzor: Reported 677 times.
> > X-Spam-DCC: cpollock 104; Body=many Fuz1=many Fuz2=many
>
>Yet their markup shows:
>
> > X-Virus-Scanned: amavisd-new at
> > Old-X-Spam-Score: 0
> > Old-X-Spam-Level:
> > Old-X-Spam-Status: No, score=0 tagged_above=-10 required=6 tests=[none]
>
>Their explaination for this is:
>
> > It's not that they had no tests run, it's that they had all the tests run
> > and the score came out as ZERO so no header was added.
> > Jim...
> >
>
>That just doesn't sound right to me that all possible tests were run
>and there
>were no hits, but I guess its possible.
Are you assuming that the two configurations are identical? Yours
has Bayes, DKIM verification, Pyzor and DCC enabled. They may not be
be using those plugins.
Regards,
-sm