You need the Net::DNS perl Module for the MX check. And you need to install Razor2 and DCC for those other tests.
You can d/l them at http://razor.sf.net and http://rhyolite.com/anti-spam/dcc. -Paul -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jon Gabrielson Sent: Tuesday, November 12, 2002 11:32 AM To: Paul Fries Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] 2 more false negatives. ok, i removed the -L option, but the following 3 rules still don't show up. Is there something special I need to do to make these rules show up? 3.1 -- No MX records for the From: domain 3.9 -- Listed in Razor2, see http://razor.sf.net/ 2.7 -- Listed in DCC, see http://rhyolite.com/anti-spam/dcc/ Thanks, Jon. On Tuesday 12 November 2002 12:04, Paul Fries wrote: > Hmm. Those were both identified as spam by my scanner. However > falseng2.txt was caught only because of DCC and Razor. > > Here is the score details: > > Falsneg1.txt : > > X-Spam-Flag: YES > X-Spam-Level: ******* > X-Spam-Checker-Version: SpamAssassin 2.43 (1.115.2.20-2002-10-15-exp) > X-Spam-Report: 7.40 hits, 6 required; > * 1.8 -- BODY: Contains 'Dear (something)' > * 0.4 -- BODY: Claims you can be removed from the list > * 0.4 -- BODY: Claims you can be removed from the list > * 0.1 -- BODY: Contains 'Dear Somebody' > * 1.6 -- BODY: Spam phrases score is 05 to 08 (medium) > [score: 7] > * 3.1 -- No MX records for the From: domain > > falseneg2.txt : > > X-Spam-Flag: YES > X-Spam-Level: ********** > X-Spam-Checker-Version: SpamAssassin 2.43 (1.115.2.20-2002-10-15-exp) > X-Spam-Report: 10.30 hits, 6 required; > * 0.2 -- To: repeats address as real name > * 2.8 -- BODY: Urges you to call now > * 0.5 -- BODY: Spam phrases score is 01 to 02 (low) > [score: 1] > * 0.2 -- BODY: A WHOLE LINE OF YELLING DETECTED > * 3.9 -- Listed in Razor2, see http://razor.sf.net/ > * 2.7 -- Listed in DCC, see http://rhyolite.com/anti-spam/dcc/ > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Jon > Gabrielson > Sent: Tuesday, November 12, 2002 10:51 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] 2 more false negatives. > > Attached are 2 more false negatives. > > Jon. > > p.s. is there a better place to report these? ------------------------------------------------------- This sf.net email is sponsored by: To learn the basics of securing your web site with SSL, click here to get a FREE TRIAL of a Thawte Server Certificate: http://www.gothawte.com/rd522.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk ------------------------------------------------------- This sf.net email is sponsored by: To learn the basics of securing your web site with SSL, click here to get a FREE TRIAL of a Thawte Server Certificate: http://www.gothawte.com/rd522.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
