[SA-List] Zero score emails

["Carnegie, Martin" <Ma...@atcoitek.com>]

I am not sure what happened here, but one of my clients got 6 spam
messages last night and only one was detected as spam.  Three had a
score of 0.0, one with 0.5 and one with 4.2 (close enough)

Here are the messages

 <<FW: Wonderful   Get Vicdin (Hydrocodone), Overnite Shipping thruway>>
 <<  Nothing easier - meds onInternet -pay less m0ney dosage>>  <<  bvy
cheap Pharmaceuticals through us! pessimum>>  <<  :) looking youthfuler
is less expensive epidermis>>  <<Hpo sweating, trembling, shaking
because of that trauma?>> 

>From what I can see, most of these appear to come from the same place
(or close to).  Has anyone else had a bunch of these over the past
couple days?

Now I need to read up on submitting to surlb :)

Martin

Re: {SPAM} [SA-List] Zero score emails

[Matt Kettler <mk...@evi-inc.com>]

At 09:50 AM 11/3/2004, Carnegie, Martin wrote:
>I am not sure what happened here, but one of my clients got 6 spam 
>messages last night and only one was detected as spam.  Three had a score 
>of 0.0, one with 0.5 and one with 4.2 (close enough)

More important than sending us the emails is to tell us what rules hit? You 
sent us "pure" messages without any SA headers or reports...

For that matter, what version of SA are you using??

The group racked up a lot of points on my system, mostly from 
surbl..  Looking at what SA you're using, and what rules hit can be key to 
identifying your problem... did ALL_TRUSTED fire? etc..