Need help with a simple problem

[Matt Rossiter <mr...@verio.net>]

I´m probably missing something really easy here.  I seem to get quite a bit of spams with spamassassin.txt attached, and it contains something like the following:

 

 

Content analysis details:   (9.5 points, 5.0 required)

 

 pts rule name              description

--------------------------------------------------

 1.1 EXTRA_MPART_TYPE       Header has extraneous Content-type:...type=3D e=ntry

-0.0 SPF_HELO_PASS          SPF: HELO matches SPF record

 3.2 CHARSET_FARAWAY_HEADER A foreign language charset used in headers

 0.2 HTML_TAG_BALANCE_BODY  BODY: HTML has unbalanced "body" tags

 0.0 HTML_MESSAGE           BODY: HTML included in message

 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level

                            above 50%

                            [cf: 100]

 0.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)

 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

                            [cf: 100]

 2.5 MIME_CHARSET_FARAWAY   MIME character set indicates foreign language

-----------------------------------------------------

 

 

This is what the headers are saying:

---------------------------------------------

X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on rossiters.com

X-Spam-Level: ***

X-Spam-Status: No, score=3.2 required=4.5 tests=HTML_MESSAGE,

    HTML_TAG_BALANCE_BODY,RCVD_IN_BL_SPAMCOP_NET,SPF_HELO_PASS 

    autolearn=no version=3.1.0

 

Obviously an email with a score of 9.5 is a spam, but it doesn't get filtered out.  In the headers it only gets a 3.2

Why are the two scores different?   I'd like to setup a rule to filter these types of messages out too.

 

Here's my Setup:

RedHat Linux 9

SpamAssassin-3.1.0

procmail-3.22

mimedefang-2.53

sendmail-8.13.4

 

Matt