You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by jason lingnau <ja...@intuitiveisp.com> on 2006/01/18 19:35:10 UTC
SA scoring not labeling spam as {Spam?}
Hi yall! ,
Great time reading this list , thanks for all the submissions!
SA version 2.83/razor2
Most spam of the spam SA scores ( 5 and over) is getting labeled as
{Spam?} but not all .
Subject: [RE] 01-17-06 Update Released
Content analysis details: (5.7 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.3 FROM_HAS_MIXED_NUMS From: contains numbers mixed in with
letters
1.0 FROM_ENDS_IN_NUMS From: ends in numbers
1.6 BAYES_60 BODY: Bayesian spam probability is 60 to
70%
[score: 0.6374]
1.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence between 51
and 100
[cf: 100]
1.0 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.3 DNS_FROM_RFCI_DSN RBL: From: sender listed in dsn.rfc-
ignorant.org
Any ideas as to why this didnt get tagged. ( I included the subject
because I suspect [RE] has something to do with it)
YES! Im a newbie and my eyes hurt.
jason
Re: SA scoring not labeling spam as {Spam?}
Posted by Matt Kettler <mk...@evi-inc.com>.
jason lingnau wrote:
>
> On Jan 18, 2006, at 4:20 PM, Matt Kettler wrote:
>
>> jason lingnau wrote:
>>
>>> Hi yall! ,
>>>
>>> Great time reading this list , thanks for all the submissions!
>>>
>>> SA version 2.83/razor2
>>
>>
>> Erm, check that version number.. there are no SA version between 2.66
>> and 2.99.
>
>
> centOS machine running latest version ( recently upgraded )of
> MailScanner that I want to have control SA v2.63
>
Ahh, you're using MailScanner...
Two thing to be aware of:
1) If it matches a MailScanner whitelist, it will not be tagged as spam, no
matter what the SA score is.
2) MailScanner never generates in-body reports for SpamAssassin like the one you
quoted before. (MS does it's own tagging and uses SA as a score engine only) If
you got a report like that, then your MailScanner did not generate it. Either
someone else added it or you are double-scanning messages somewhere along the line.
I suggest turning on this setting in your MailScanner.conf:
Always Include SpamAssassin Report = yes
Then check the X-*-MailScanner-SpamCheck header to see what happened when your
MailScanner looked at the message.
Re: SA scoring not labeling spam as {Spam?}
Posted by jason lingnau <ja...@intuitiveisp.com>.
On Jan 18, 2006, at 4:20 PM, Matt Kettler wrote:
> jason lingnau wrote:
>> Hi yall! ,
>>
>> Great time reading this list , thanks for all the submissions!
>>
>> SA version 2.83/razor2
>
> Erm, check that version number.. there are no SA version between
> 2.66 and 2.99.
centOS machine running latest version ( recently upgraded )of
MailScanner that I want to have control SA v2.63
>
>>
>> Most spam of the spam SA scores ( 5 and over) is getting labeled as
>> {Spam?} but not all .
>>
>> *Subject: * *[RE] 01-17-06 Update Released*
>>
>> Content analysis details: (5.7 points, 5.0 required)
>>
>
> <snip>
>>
>> Any ideas as to why this didnt get tagged.
>
> Any chance that body report was generated by an outside server
> instead of by yours?
>
> Check to see what the X-Spam-Status header for that message has in
> it to see
> what the most recent server thought of it.
>
> ( I included the subject because I suspect [RE] has something to do
> with it)
>
> It really shouldn't. However, I would also check the raw message
> source to make
> sure there is only one Subject: header, and not two of them.
the raw source got me to look closer and see that it was piped
through sa twice, found the executable in /etc/rc.d/init.d and If I
took that out and it seems to have fixed it.
I have experienced duplicate email periodically , maybe that was the
cause. 2 birds one stone?
THANX
jason
>
>>
>> YES! Im a newbie and my eyes hurt.
>>
>> jason
Re: SA scoring not labeling spam as {Spam?}
Posted by Matt Kettler <mk...@evi-inc.com>.
jason lingnau wrote:
> Hi yall! ,
>
> Great time reading this list , thanks for all the submissions!
>
> SA version 2.83/razor2
Erm, check that version number.. there are no SA version between 2.66 and 2.99.
>
> Most spam of the spam SA scores ( 5 and over) is getting labeled as
> {Spam?} but not all .
>
> *Subject: * *[RE] 01-17-06 Update Released*
>
> Content analysis details: (5.7 points, 5.0 required)
>
<snip>
>
> Any ideas as to why this didnt get tagged.
Any chance that body report was generated by an outside server instead of by yours?
Check to see what the X-Spam-Status header for that message has in it to see
what the most recent server thought of it.
( I included the subject because I suspect [RE] has something to do with it)
It really shouldn't. However, I would also check the raw message source to make
sure there is only one Subject: header, and not two of them.
>
> YES! Im a newbie and my eyes hurt.
>
> jason