You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Chris <cp...@earthlink.net> on 2006/07/28 00:36:35 UTC
More FN's since SA-Update run
Since I ran sa-update last Sunday I've been getting between 1 and 3 FN's
daily. Here's a sample of todays:
X-Spam-Virus: No
X-Spam-Seen: Tokens 92
X-Spam-New: Tokens 123
X-Spam-Remote: Host localhost.localdomain
X-Spam-Checker-Version: SpamAssassin 3.1.2 (2006-05-25) on
cpollock.localdomain
X-Spam-Hammy: Tokens 10
X-Spam-Status: No, score=3.6 required=5.0
tests=BAYES_60,DNS_FROM_RFC_ABUSE,
MSGID_FROM_MTA_ID autolearn=disabled version=3.1.2
X-Spam-Spammy: Tokens 17
X-Spam-Pyzor: Reported 0 times.
X-Spam-Token: Summary Tokens: new, 31; hammy, 10; neutral, 65; spammy, 17.
X-Spam-DCC: cpollock 1113; Body=1 Fuz1=1 Fuz2=1
X-Spam-Untrusted: Relays [ ip=201.78.246.234 rdns= helo=1C124EC
by=mx-casero.atl.sa.earthlink.net ident= envfrom= intl=0
id=1g6cgY7vl3Nl34m0 auth= ] [ ip=201.78.246.234 rdns= helo=
by=UIAVP-QXHTBMD-A4-x.bellauk.com ident= envfrom= intl=0 id= auth= ]
X-Spam-Level: ***
X-Spam-RBL: Results <dns:fireandice.org?type=MX> [0 fireandice.org.]
<dns:fireandice.org> [216.193.217.213]
<dns:fireandice.org.fulldom.rfc-ignorant.org> [127.0.0.4]
Status: U
Return-Path: <Mi...@fireandice.org>
Received: from pop.earthlink.net [209.86.93.201]
by localhost with POP3 (fetchmail-6.2.5)
for cpollock@localhost (single-drop); Thu, 27 Jul 2006 15:17:06
-0500 (CDT)
Received: from 1C124EC ([201.78.246.234])
by mx-casero.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP
id 1g6cgY7vl3Nl34m0; Thu, 27 Jul 2006 16:15:57 -0400 (EDT)
Received: from 201.78.246.234
by UIAVP-QXHTBMD-A4-x.bellauk.com with smtp
for <cp...@earthlink.net>; Thu, 27 Jul 2006 13:15:59 -0800
From: "Glen.T" <Mi...@fireandice.org>
To: "Cpollet" <cp...@earthlink.net>
Subject: Works also went into the public domain in most other countries. In
the European Union, where a retroactive copyright extension law
re-copyrighted 20 years worth of public domain works a couple of years
back, works by authors who died in 1927 rejoined the public domain. In most
of the rest of the world, works by authors who died in 1947 entered the
public domain.
Date: Thu, 27 Jul 2006 13:15:59 -0800
Mime-Version: 1.0
Message-Id: <20...@mx-casero.atl.sa.earthlink.net>
X-ELNK-Info: spv=0;
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
X-SenderIP: 201.78.246.234
X-ASN: ASN-7738
X-CIDR: 201.78.192.0/18
Content-Type:
X-UID: 19458
X-Length: 2519
When spamassassin -t is run against the saved spam however (without running
spamassassin -r) the output is completely different:
Content preview: You can buy absolutely legal, perfect quality must have
medications at lowest prices just in few minutes
http://www.geocities.com\///\stanton1094 Terri Colbert John Mark
Ockerbloom, Editor John Mark Ockerbloom, Editor [...]
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
1.4 MSGID_FROM_MTA_ID Message-Id for external message added locally
2.0 BAYES_60 BODY: Bayesian spam probability is 60 to 80%
[score: 0.6656]
0.2 DNS_FROM_RFC_ABUSE RBL: Envelope sender in abuse.rfc-ignorant.org
2.6 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[<http://dsbl.org/listing?201.78.246.234>]
3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[201.78.246.234 listed in sbl-xbl.spamhaus.org]
-3.2 AWL AWL: From: address is in the auto white-list
Prior to this I haven't gotten a FN for at least 6 months.
Any possible reasons why this may be happening now?
Running SA 3.1.2
--
Chris
17:29:46 up 17 days, 15:34, 2 users, load average: 0.68, 0.43, 0.23