Question on score received for email

[Vee Persaud <Ve...@pwgsc.gc.ca>]

Hi,

I was wondering why the following email was not tagged with a higher score, yet it was quarantined.  The email and my qmail-scanner options are as follows:


Received: from mx1.magmacom.com (206.191.0.217)
  by 198.103.10.100 with SMTP; 14 Oct 2004 18:17:52 -0000
Received: from webmail2.magma.ca (webmail2.magma.ca [206.191.0.202])
        by mx1.magmacom.com (8.13.0/8.13.0) with ESMTP id i9EIHoho029611
        for <d_...@mx.civitas.gc.ca>; Thu, 14 Oct 2004 14:17:51 -0400
Received: (from idefix@localhost)
        by webmail2.magma.ca (Magma's Mail Server) id i9EIHobX005997;
        Thu, 14 Oct 2004 14:17:50 -0400 (EDT)
Date: Thu, 14 Oct 2004 14:17:50 -0400 (EDT)
Message-Id: <20...@webmail2.magma.ca>
To: d_cansit@mx.civitas.gc.ca
From: "Michel Poulin" <id...@magma.ca>
Subject: Viagra  test of email management system
X-Account: idefix
X-Sender-IP: 198.103.220.14
X-INFO: Folder - 0, Message - 0, MimeBody - 0
Mime-Version: 1.0
Content-Type: text/plain
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on claven.pwgsc.gc.ca
X-Spam-Level: **
X-Spam-Status: No, hits=2.5 required=5.0 tests=SUBJ_VIAGRA autolearn=no 
        version=2.63

this is a test of the CEC system

*** Qmail-Scanner Quarantine Envelope Details Begin ***
X-Qmail-Scanner-Mail-From: "idefix@webmail2.magma.ca" via claven
X-Qmail-Scanner-Rcpt-To: "d_cansit@mx.civitas.gc.ca"
X-Qmail-Scanner: 1.22st (spamassassin: 2.63.  Problem Found. Processed in 1.614694 secs) process 20926 
Quarantine-Description: Spam Viagra
*** Qmail-Scanner Envelope Details End ***



# ./configure --qs-user qscand --qs-group qscand --spooldir /var/log/qmailscan --qmaildir /var/qmail --bindir /va
r/qmail/bin --qmail-queue-binary /var/qmail/bin/qmail-queue  --admin spamadm --domain claven --admin-fromname ""
--notify sender,admin,recips --local-domains claven --silent-viruses auto --block-password-protected 0 --lang en_
GB --debug 0 --minidebug 1 --unzip 0 --add-dscr-hdrs 0 --dscr-hdrs-text "X-Qmail-Scanner" --archive 0 --run-first
-p-s 0 --redundant no --log-details 0 --log-crypto 0 --fix-mime 2  --ignore-eol-check 0 --virus-to-delete 0 --sa-
delta 0 --sa-subject "" --sa-quarantine 8.5 --sa-delete 50 --sa-reject 0 --sa-alt 0 --sa-debug 0 --scanners "verb
ose_spamassassin" --install 1



Thanks

Re: Question on score received for email

[Matt Kettler <mk...@evi-inc.com>]

At 11:23 AM 10/15/2004, Vee Persaud wrote:
>Hi,
>
>I was wondering why the following email was not tagged with a higher 
>score, yet it was quarantined.  The email and my qmail-scanner options are 
>as follows:

<snip>

>*** Qmail-Scanner Quarantine Envelope Details Begin ***
>X-Qmail-Scanner-Mail-From: "idefix@webmail2.magma.ca" via claven
>X-Qmail-Scanner-Rcpt-To: "d_cansit@mx.civitas.gc.ca"
>X-Qmail-Scanner: 1.22st (spamassassin: 2.63.  Problem Found. Processed in 
>1.614694 secs) process 20926
>Quarantine-Description: Spam V-word.

Note: Quarantine-Description modified, due to chance of being quarantined 
by receipient.

It would appear that your qmail scanner is configured to quarantine 
anything containing the V-word, or maybe just anything containing it in the 
subject line, regardless of what SA says.