Re: FROM_MISSP_* causing FPs

2012-12-02 Thread John Wilcock
Le 30/11/2012 18:18, John Hardin a écrit : header __AJB_HAS_XEROXX-Mailer =~ /WorkCentre \d{3,5}/ header __AJB_XEROX_SUBJ Subject =~ /Scan from a Xerox/ Thanks! I will add those to my sandbox. Question: how often do you see that subject _without_ that X-Mailer? Whenever s

Re: Trouble with bayes poisoning spam

2012-12-02 Thread Alex
Hi, > Actually, that's a Snowshoe IP. > Which, on balance, can be a good thing, slaying-wise. :) You mean that it's more likely to be added to the SBL with the other IPs in the same range sooner? > Almost four years ago, I posted my approach to snowshoe slaying: > > http://mail-archives

HELO_DYNAMIC_IPADDR2 & HELO_DYNAMIC_SPLIT_IP hitting ham

2012-12-02 Thread Niamh Holding
Hello X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on mail.redbus.holtain.net X-Spam-Flag: YES X-Spam-Level: *** X-Spam-Status: Yes, score=7.2 required=4.5 autolearn=no X-Spam-Report: * 3.6 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr