[SAtalk] Message Evades SA

[Michael]

I received a message this morning and it managed to evade my SA.  I think
that I know why, but I do not know how to fix it.  Here is the message
header:

*
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 21047 invoked by uid 89); 27 Jan 2003 08:26:34 -
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 21044 invoked by uid 8005); 27 Jan 2003 08:26:33 -
Received: from [EMAIL PROTECTED] by mini by uid 89 with
qmail-scanner-1.15
 (clamscan: 0.54.  Clear:.
 Processed in 26.313488 secs); 27 Jan 2003 08:26:33 -
Received: from unknown (HELO odysseus.digitalplace.org) (64.252.11.192)
  by mini with SMTP; 27 Jan 2003 08:26:07 -
Received: (qmail 21740 invoked from network); 27 Jan 2003 08:25:58 -
Received: from redlight2.redlightemail.com (HELO REDLIGHT2) (213.239.138.52)
  by 192.168.0.250 with SMTP; 27 Jan 2003 08:25:58 -
MIME-Version: 1.0
From: Private Porn Stars 
To: Aaron <[EMAIL PROTECTED]>
Subject: Limited Edition = Double Trouble - Amsterdam =
Content-Type: multipart/related; charset="us-ascii"; type="text/html";
 boundary="-_5780_6017__7641"
X-Priority: 1
content = 251
X-Qmail-Scanner-Message-ID: <[EMAIL PROTECTED]>

*

The only thing that I can gather that is different from this message is that
it first went to my secondary mail server.  I have 2 mail servers running
qmail, if my first connection goes down or becomes busy then mail bounces to
my secondary server.  This server is only a queue and does NOT run SA.  It
only runs qmail.  But once my primary server comes up or is less busy then
the secondary forwards the message to my primary.

I just took down my primary server and sent a message to myself.  It first
went to the secondary, but then came into my primary and was checked by SA,
so now I am very confused.

Also I checked other messages from before and after this message and they
were all checked by SA.

Any help would be greatly appreciated.

Michael





---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] My First Rule!

[Jonathan Nichols]

Greetings!
I've made an attempt at my very first rule. *grin*
Recently, a lot of short spam has been coming in, but there's one thing
they all have in common: the lame misspelling "secks."
I tried writing a rule that would give 4.0 to any email that has
"secks" in it, and here's what I came up with:

body SECKS1 /secks/i
describe SECKS1   Porn spam!
score SECKS1  4.0

Does this look about right? I'd rather not put bad rules onto the mail
server and break things. :)

Thanks!



---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Re: [SAtalk] False positive for foreign language

[Tony L. Svanstrom]

On Mon, 27 Jan 2003 the voices made Matt Kettler write:

MK> (hmm, I see this tempting Tony and several others to send me a bunch of
MK> non-spam emails in a language I don't speak... hmm)

 Vad får dig att tro det? ;-)

 Honestly, I don't have much non-english e-mails that either aren't personal or
business, so I don't have much I could send anyone; BUT... if someone wants me
to I could forward one or two (mostly) low-activity mailinglist where about
70+ % of the postings are in swedish.

-- 
  /\___/\  /\___/\
  \_@ @_/  \_@ @_/
 +--oOO-(_)-OOo--oOO-(_)-OOo--+
 | Per scientiam ad libertatem! // Through knowledge towards freedom! |
 +---ôôô---ôôôôôô---ôôô---+
 \O/   \O/  (c)1998-2003  [EMAIL PROTECTED]  \O/   \O/



---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk