I have a series of local rules and a extensive blacklist setup.
Everything resides in /etc/mail/spamassassin. local.cf only holds some
settings (like required_hits 7). The other settings are in
udlp_blacklist.cf, udlp_whitelist.cf, udlp_rules.cf and
udlp_scores.cf. They are correclty parsed and used whenever I run
either spamassassin or spamc by hand. And they also more often than
not filter as expected. However, some mail gets through that is
filtered, but ignores all but in the local.cf file.
We are running spamassassin 2.42.
Here is the header segment from a mail that was not filtered correclty:
Received: from mailrelay.udlp.com
([10.1.56.252])
by asdmngwia.mpls.udlp.com; Fri, 06 Dec 2002 12:41:11 -0600
Received: from transmit10.DAILYREWARDMAIL-MAIL.COM ([66.197.162.12])
by mailrelay.udlp.com (8.12.6/8.12.6) with SMTP id gB6If9DJ024383
for <*MUNGED*@udlp.com>; Fri, 6 Dec 2002 12:41:11 -0600
Content-Type: text/html; charset="us-ascii"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
From: "Pay Increase" <[EMAIL PROTECTED]>
Reply-To: "Pay Increase"
<[EMAIL PROTECTED]>
To: *MUNGED*@UDLP.COM
Date: Fri, 06 Dec 2002 18:41:26 GMT
Subject: Earn your Bachelors Online: Accounting, Crimnal Justice, Health
Care...
Message-Id: <[EMAIL PROTECTED]>
X-Info: please report abuse of this service to [EMAIL PROTECTED]
X-Spam-Status: No, hits=6.1 required=7.0
tests=BIG_FONT,CLICK_BELOW,CTYPE_JUST_HTML,EARNINGS,EXCUSE_1,
HTML_50_70,HTML_FONT_COLOR_NAME,HTML_FONT_COLOR_UNSAFE,
HTML_FONT_COLOR_YELLOW,HTML_FONT_FACE_ODD,
SPAM_PHRASE_08_13,WEB_BUGS
version=2.42
X-Spam-Level: ******
And Here is the same message (with spamassassin headers stripped) run
through spamc (this was run on the same mail relay):
root@mailrelay:/etc/mail/spamassassin/test# spamc <dailyrewardmail
Received: from mailrelay.udlp.com
([10.1.56.252])
by asdmngwia.mpls.udlp.com; Fri, 06 Dec 2002 12:41:11 -0600
Received: from transmit10.DAILYREWARDMAIL-MAIL.COM ([66.197.162.12])
by mailrelay.udlp.com (8.12.6/8.12.6) with SMTP id gB6If9DJ024383
for <*MUNGED*@udlp.com>; Fri, 6 Dec 2002 12:41:11 -0600
Content-Type: text/html; charset="us-ascii"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
From: "Pay Increase" <[EMAIL PROTECTED]>
Reply-To: "Pay Increase"
<[EMAIL PROTECTED]>
To: *MUNGED*@UDLP.COM
Date: Fri, 06 Dec 2002 18:41:26 GMT
Subject: ***Marked as Spam*** Earn your Bachelors Online: Accounting, Crimnal Justice,
Health Care...
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Status: Yes, hits=108.1 required=7.0
tests=BIG_FONT,CLICK_BELOW,CTYPE_JUST_HTML,DOMAIN_DAILY,EARNINGS,
EXCUSE_1,HTML_50_70,HTML_FONT_COLOR_NAME,
HTML_FONT_COLOR_UNSAFE,HTML_FONT_COLOR_YELLOW,
HTML_FONT_FACE_ODD,SPAM_PHRASE_08_13,USER_IN_BLACKLIST,
WEB_BUGS
version=2.42
X-Spam-Flag: YES
X-Spam-Level:
************************************************************************************************************
X-Spam-Checker-Version: SpamAssassin 2.42 (1.115.2.14-2002-10-04-exp)
--
--
Matt Baxter
lab monkey
[EMAIL PROTECTED]
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
