Hi there,

who on earth registers all these false positives in Razor?! Each day I get a 
couple of false positives over the Debian-User mailing list, messages that are 
CLEARLY NO SPAM:

>Message-ID: <007901c25f5d$d31aa050$805b4181@damien>
>From: "Joe Emenaker" <[EMAIL PROTECTED]>
>To: <[EMAIL PROTECTED]>
>Date: Wed, 18 Sep 2002 14:53:29 -0700
>MIME-Version: 1.0
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2600.0000
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
>Resent-Message-ID: <Ku3ok.A.PAE.VUPi9@murphy>
>Resent-From: [EMAIL PROTECTED]
>X-Mailing-List: <[EMAIL PROTECTED]> archive/latest/233911
>X-Loop: [EMAIL PROTECTED]
>List-Post: <mailto:[EMAIL PROTECTED]>
>List-Help: <mailto:[EMAIL PROTECTED]?subject=help>
>List-Subscribe: <mailto:[EMAIL PROTECTED]?
subject=subscribe>
>List-Unsubscribe: <mailto:[EMAIL PROTECTED]?
subject=unsubscribe>
>Precedence: list
>Resent-Sender: [EMAIL PROTECTED]
>Resent-Date: Wed, 18 Sep 2002 16:50:13 -0500 (CDT)
>Subject: *****SPAM***** Why do the config scripts always get run twice during 
install?
>Content-Type: multipart/alternative;
>       boundary="----=_NextPart_000_0076_01C25F23.26693B80"
>X-Spam-Status: Yes, hits=6.1 required=5.0
>       tests=FUDGE_MULTIHOP_RELAY,RAZOR_CHECK,RCVD_IN_MULTIHOP_DSBL,
>             RCVD_IN_UNCONFIRMED_DSBL,SPAM_PHRASE_00_01
>       version=2.40-cvs
>X-Spam-Flag: YES
>X-Spam-Level: ******
>X-Spam-Checker-Version: SpamAssassin 2.40-cvs (1.117-2002-08-29-exp)
>X-Spam-Report:   6.10 hits, 5 required;
>  *  0.6 -- BODY: Spam phrases score is 00 to 01 (low)
>  *  5.0 -- Listed in Razor v1, see http://razor.sf.net/
>  *  1.0 -- RBL: Received via a relay in multihop.dsbl.org
>            [RBL check: found 42.60.65.129.multihop.dsbl.org]
>  *  0.5 -- RBL: Received via a relay in unconfirmed.dsbl.org
>            [RBL check: found 42.60.65.129.unconfirmed.dsbl.org]
>  * -1.0 -- RBL: Do not double penalize if an IP is a multihop and an open 
relay
>Status:   
>
>This is a multi-part message in MIME format.
>
>------=_NextPart_000_0076_01C25F23.26693B80
>Content-Type: text/plain;
>       charset="iso-8859-1"
>Content-Transfer-Encoding: quoted-printable
>
>I run about 7 Debian boxes... and I keep them all up with "unstable". I =
>use dselect to maintain my list of packages to install/remove, and I =
>used to use ftp as the fetch method, but I've recently converted all =
>over to apt.
[...]

(Note that I increased the Razor score but that doesn't explain WHY these 
messages are listed in Razor.)

Is there a way to determine WHO did this and to stop them from adding more 
false positives?

Thanks,

Ralf


-- 
   L I N U X       .~.
  The  Choice      /V\
   of a  GNU      /( )\
  Generation      ^^-^^




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to