I've also noticed this. I have two systems with different mail accounts and different versions of SA installed. One has 2.31 and the other has 2.60. The one with 2.31 catches much more spam than the newer version. For example: the 2.31 would assign a score of  9 to a particular message and the exact same message would get 3.1 on the 2.60! I'm still trying to see what the changes have been. This particular spam message was coming from a forged yahoo.com.ar and i noticed that the rule has changed to check only mail coming from yahoo.com in version 2.60 (in file EvalTests.pm, function check_for_forged_yahoo_received_headers() ). But i haven't checked the other differences. Here is the assignments in both versions:

X-MailScanner-SpamCheck: SpamAssassin (score=9, required 5, X_ESMTP,
    X_SMTPEXP_VERSION, X_EM_VER_PRESENT, X_EM_REGISTRATION,
    DOUBLE_CAPSWORD, NORMAL_HTTP_TO_IP, SUPERLONG_LINE, MAILTO_LINK,
    FROM_AND_TO_SAME, FORGED_YAHOO_RCVD), (old version->) not spam,
    SpamAssassin (score=3.1, required 5,
    HTML_30_40, HTML_MESSAGE, HTML_TAG_EXISTS_TBODY, MIME_BOUND_NEXTPART,
    MIME_LONG_LINE_QP, NORMAL_HTTP_TO_IP, PRIORITY_NO_NAME, X_ESMTP)

Regards,

César



Tim Aiello wrote:
> Since upgrading from SA version 2.42 (or 2.43) to 2.53 and now 2.54 I have
> noticed a much greater deal of SPAM slipping through the filters. Is this
> because rules have been relaxed somewhat since about 2.43 or have the
> spammers just been getting better in getting past the rules?

Reply via email to