Guys, I still get low scoring spam through, My Bayes database is not yet populated (135 < 200) I wish to start feeding some of these low scoring spams using SA Learn.
My problem is, filtering with SA is on Postfix which relays into Groupwise. By the time I get the spam, X-Headers, and Groupwise headers have been added, I also have no way of "bouncing" the mail back. I can start collecting the mime.822 messages and ftp them onto my inbound relay in batches, but what info will I have to remove to train spamassassin correctly. also It seems a lot of these low scoring spams are first relayed through our ISP's fallback relays for our domain (lfallback1.lnd.ops.eu.uu.net) (cheeky sods!!!) Here is an example of the spam, can someone please show me what to trim off so I can feed it in. Thanks in advance, Simon. Received: from mailgate.msxi-euro.com ([136.140.231.40]) by msxi-euro.com; Tue, 10 Jun 2003 01:36:56 +0100 Received: by mailgate.msxi-euro.com (Postfix, from userid 1002) id 5EE9F9F25; Tue, 10 Jun 2003 01:36:26 +0000 (GMT) Received: from lfallback1.lnd.ops.eu.uu.net (lfallback1.lnd.ops.eu.uu.net [62.189.34.30]) by mailgate.msxi-euro.com (Postfix) with ESMTP id 647139F22 for <[EMAIL PROTECTED]>; Tue, 10 Jun 2003 01:36:21 +0000 (GMT) Received: from modemcable055.158-203-24.mtl.mc.videotron.ca ([24.203.158.55] helo=gtei.net) by lfallback1.lnd.ops.eu.uu.net with smtp (Exim 3.22 #1) id 19PX8l-0006n0-00 for [EMAIL PROTECTED]; Tue, 10 Jun 2003 00:37:33 +0000 Message-ID: <[EMAIL PROTECTED]> From: "Kristopher Nance" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: no joke d ips9553ds9 Date: Tue, 10 Jun 2003 15:49:45 +0000 MIME-Version: 1.0 In-Reply-To: <[EMAIL PROTECTED]> Content-Type: text/html Content-Transfer-Encoding: 8bit X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-Spam-Status: No, hits=3.5 required=5.0 tests=BANG_GUARANTEE,CLICK_BELOW,DATE_IN_FUTURE_12_24, HTML_FONT_BIG,HTML_FONT_BIG_B,HTML_FONT_COLOR_BLUE, HTML_FONT_COLOR_RED,HTML_MESSAGE,HTML_TAG_EXISTS_TBODY, IN_REP_TO,MAILTO_TO_SPAM_ADDR,MIME_HTML_ONLY,MONEY_BACK, MSGID_GOOD_EXCHANGE,PENIS_ENLARGE,PENIS_ENLARGE2, SUBJ_HAS_SPACES version=2.53 X-Spam-Level: *** X-Spam-Checker-Version: SpamAssassin 2.53 (1.174.2.15-2003-03-30-exp) <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:o = "urn:schemas-microsoft-com:office:office" xmlns:w = "urn:schemas-microsoft-com:office:word" xmlns:st1 = "urn:schemas-microsoft-com:office:smarttags"><HEAD> <META http-equiv=Content-Type content="text/html; charset=us-ascii"> <META content=Word.Document name=ProgId> <META content="MSHTML 6.00.2723.2500" name=GENERATOR> <META content="Microsoft Word 10" name=Originator><LINK href="cid:[EMAIL PROTECTED]" rel=File-List><o:SmartTagType name="country-region" namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><o:SmartTagType name="place" namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><o:SmartTagType name="time" namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><o:SmartTagType name="date" namespaceuri="urn:schemas-microsoft-com:office:smarttags"></o:SmartTagType><!--[if gte mso 9]><xml> <o:OfficeDocumentSettings> <o:DoNotRelyOnCSS/> </o:OfficeDocumentSettings> </xml><![endif]--><!--[if gte mso 9]><xml> <w:WordDocument> <w:SpellingState>Clean</w:SpellingState> <w:GrammarState>Clean</w:GrammarState> <w:DocumentKind>DocumentEmail</w:DocumentKind> <w:EnvelopeVis/> <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel> </w:WordDocument> </xml><![endif]--><!--[if !mso]> <STYLE> st1\:*{behavior:url(#default#ieooui) } </STYLE> <![endif]--> <STYLE> <!-- /* Font Definitions */ @font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:553679495 -2147483648 8 0 66047 0;} @font-face {font-family:Verdana; panose-1:2 11 6 4 3 5 4 4 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:536871559 0 0 0 415 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-parent:""; margin:0in; margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:12.0pt; font-family:"Times New Roman"; mso-fareast-font-family:"Times New Roman";} a:link, span.MsoHyperlink {color:blue; text-decoration:underline; text-underline:single;} a:visited, span.MsoHyperlinkFollowed {color:blue; text-decoration:underline; text-underline:single;} p.MsoAutoSig, li.MsoAutoSig, div.MsoAutoSig {margin:0in; margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:12.0pt; font-family:"Times New Roman"; mso-fareast-font-family:"Times New Roman";} p {mso-margin-top-alt:auto; margin-right:0in; mso-margin-bottom-alt:auto; margin-left:0in; mso-pagination:widow-orphan; font-size:12.0pt; font-family:"Times New Roman"; mso-fareast-font-family:"Times New Roman";} span.EmailStyle18 {mso-style-type:personal-reply; mso-style-noshow:yes; mso-ansi-font-size:10.0pt; mso-bidi-font-size:10.0pt; font-family:Arial; mso-ascii-font-family:Arial; mso-hansi-font-family:Arial; mso-bidi-font-family:Arial; color:navy;} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.25in 1.0in 1.25in; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.Section1 {page:Section1;} --> </STYLE> <!--[if gte mso 10]> <style> /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:"Times New Roman";} </style> <![endif]--></HEAD> <BODY lang=EN-US style="tab-interval: .5in" vLink=blue link=blue> <DIV class=Section1> <P class=MsoNormal> </P> <P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"><o:p> </o:p></SPAN></FONT></P> <TABLE class=MsoNormalTable style="BORDER-RIGHT: navy 1pt outset; BORDER-TOP: navy 1pt outset; BACKGROUND: white; BORDER-LEFT: navy 1pt outset; WIDTH: 375pt; BORDER-BOTTOM: navy 1pt outset; mso-cellspacing: 3.7pt; mso-border-alt: outset navy .75pt; mso-padding-alt: 3.75pt 3.75pt 3.75pt 3.75pt" cellSpacing=5 cellPadding=0 width=500 bgColor=white border=1> <TBODY> <TR style="HEIGHT: 21pt; mso-yfti-irow: 0; mso-yfti-lastrow: yes" height=28> <TD style="BORDER-RIGHT: navy 1pt inset; PADDING-RIGHT: 3.75pt; BORDER-TOP: navy 1pt inset; PADDING-LEFT: 3.75pt; PADDING-BOTTOM: 3.75pt; BORDER-LEFT: navy 1pt inset; WIDTH: 48pt; PADDING-TOP: 3.75pt; BORDER-BOTTOM: navy 1pt inset; HEIGHT: 21pt; mso-border-alt: inset navy .75pt" width=64 height=28> <P style="TEXT-ALIGN: center" align=center><B><FONT face=Verdana color=navy size=6><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 24pt; COLOR: navy; FONT-FAMILY: Verdana">!!!</SPAN></FONT></B><o:p></o:p></P></TD> <TD style="BORDER-RIGHT: navy 1pt inset; PADDING-RIGHT: 3.75pt; BORDER-TOP: navy 1pt inset; PADDING-LEFT: 3.75pt; PADDING-BOTTOM: 3.75pt; BORDER-LEFT: navy 1pt inset; WIDTH: 307.5pt; PADDING-TOP: 3.75pt; BORDER-BOTTOM: navy 1pt inset; HEIGHT: 21pt; mso-border-alt: inset navy .75pt" width=410 height=28> <P style="TEXT-ALIGN: center" align=center><B><FONT face="Times New Roman" color=#cc0000 size=4> <MARQUEE scrollAmount=50 scrollDelay=100 behavior=slide width=382> <SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 13.5pt; COLOR: #cc0000"><font face="Tahoma">En<sab5mm219mx>lar<svbkxxkxzxwx>ge Your Pen<stvljrj1dq4a043>is Gu<sz4u5no3kfogyb2>aranteed!</font></SPAN> </MARQUEE> </FONT></B><font face="Tahoma"><o:p></o:p></font><o:p></o:p></P></TD></TR></TBODY></TABLE> <P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="DISPLAY: none; FONT-SIZE: 12pt; mso-hide: all"><o:p> </o:p></SPAN></FONT></P> <TABLE class=MsoNormalTable style="BACKGROUND: white; WIDTH: 375pt; mso-cellspacing: 3.7pt; mso-padding-alt: 3.75pt 3.75pt 3.75pt 3.75pt" cellSpacing=5 borderColorDark=#ffc6ff cellPadding=0 width=500 bgColor=white borderColorLight=#ffc6ff border=0> <TBODY> <TR style="mso-yfti-irow: 0; mso-yfti-lastrow: yes"> <TD style="PADDING-RIGHT: 3.75pt; PADDING-LEFT: 3.75pt; PADDING-BOTTOM: 3.75pt; WIDTH: 2.5in; PADDING-TOP: 3.75pt" width=240> <P><B><FONT face=Tahoma color=white size=2><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: white; FONT-FAMILY: Tahoma">lung</SPAN></FONT></B><B><FONT face=Tahoma color=navy size=2><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Tahoma"><BR>-> No more lo<s03e2ti3sduwl>ng d<s92ox2w1tx84vl1>octor vis<s1xsezb291v2d32>its!<BR> -> Lo<sbka4ky17lzcgl>west Pric<sdjyqha1g9tc>es On The W<ss4xxdhd6b7j5n>eb<BR> -> 10<so97jifl740i>0% Mo<sro0a913l0w39s>ney Back Guara<skh27a4aqgytn2>ntee<BR> -> Shi<snf4m0m2dqqgyu>pped Ne<svqedvv38qplbc>xt Day to Your D<s63flw43mic>oor<BR> -> </SPAN></FONT></B><st1:country-region><st1:place><B><FONT face=Tahoma color=navy size=2><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Tahoma">Enl<sy8cxds2egov881>arge 3-5 inc<skwdb0jet3fiq>hes</SPAN></FONT></B></st1:place></st1:country-region><B><FONT face=Tahoma color=navy size=2><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Tahoma"><BR> </SPAN></FONT></B><B><FONT face=Tahoma color=white size=2><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: white; FONT-FAMILY: Tahoma">interruption</SPAN></FONT></B><o:p></o:p></P></TD> <TD style="PADDING-RIGHT: 3.75pt; PADDING-LEFT: 3.75pt; PADDING-BOTTOM: 3.75pt; WIDTH: 159.75pt; PADDING-TOP: 3.75pt" width=213> <P style="TEXT-ALIGN: center" align=center><B><FONT face="Times New Roman" size=3><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 12pt"><A href="http://www.web-vit.com/main2.php?rx=15466"><FONT face=Tahoma color=red size=4><SPAN style="FONT-SIZE: 13.5pt; COLOR: red; FONT-FAMILY: Tahoma">Ge<s3yt91v3ulx>t the B<s89b3uz1rc7>est Sel<sntpq3o3fp1uq>ling Pe<sle0yzf3jlfo>nis Enl<scq5u2u3isfl8b1>argement Pil<sj2d6ai1v2f2t0>ls N<seyqnhp35awg1g>OW!</SPAN></FONT></A></SPAN></FONT></B><o:p></o:p></P></TD></TR></TBODY></TABLE> <P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="DISPLAY: none; FONT-SIZE: 12pt; mso-hide: all"><o:p> </o:p></SPAN></FONT></P> <TABLE class=MsoNormalTable style="BORDER-RIGHT: navy 1pt outset; BORDER-TOP: navy 1pt outset; BACKGROUND: white; BORDER-LEFT: navy 1pt outset; WIDTH: 375pt; BORDER-BOTTOM: navy 1pt outset; mso-cellspacing: 3.7pt; mso-border-alt: outset navy .75pt; mso-padding-alt: 3.75pt 3.75pt 3.75pt 3.75pt" height=21 cellSpacing=5 cellPadding=0 width=500 bgColor=white border=1> <TBODY> <TR style="HEIGHT: 14.25pt; mso-yfti-irow: 0; mso-yfti-lastrow: yes" height=19> <TD style="BORDER-RIGHT: navy 1pt inset; PADDING-RIGHT: 3.75pt; BORDER-TOP: navy 1pt inset; PADDING-LEFT: 3.75pt; PADDING-BOTTOM: 3.75pt; BORDER-LEFT: navy 1pt inset; WIDTH: 100%; PADDING-TOP: 3.75pt; BORDER-BOTTOM: navy 1pt inset; HEIGHT: 14.25pt; mso-border-alt: inset navy .75pt" width="100%" height=19> <P style="TEXT-ALIGN: center" align=center><FONT face=Verdana color=#cc0000 size=2><SPAN style="FONT-SIZE: 10pt; COLOR: #cc0000; FONT-FAMILY: Verdana"><font color="#000066"><strong>O<sj6i8w81c0u>ur Her<sc3krgk14rp1wa>bal Peni<suold04ecv0>s Enla<s7dpfy33rmif>rgement Pi<spiocbk7hpsnv23>lls Will: </strong></font><SPAN style="FONT-WEIGHT: bold"></SPAN><B><SPAN style="FONT-WEIGHT: bold"><BR> - ga<svzgcjh36o9zg>in you 3-<sxu2a3a3bz4m1c2>5 inc<ssb4tzo1xj3c2f3>hes gu<st3vkw8swwvbv>aranteed</SPAN></B></SPAN></FONT><B><SPAN style="FONT-WEIGHT: bold"><BR> </SPAN><FONT face=Verdana color=#cc0000 size=2><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: #cc0000; FONT-FAMILY: Verdana">- make lo<s6io72t3hf2>nger lasti<s4a25i215ow1ea1>ng erec<sfd9gxe1icj3l>tions</SPAN></FONT></B><BR> <B><FONT face=Verdana color=#cc0000 size=2><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: #cc0000; FONT-FAMILY: Verdana">- expa<s7ozztn18hwvr9>nd the w<s4vbs0g3cdd66w1>idth of the p<sgq346j9cs73>eni<sttup3s2y5oac>s<BR> - incre<sl1wezq39jurv>ase the pl<srn4ehh37ldyg>easure of orga<s6kp4aaaaeu>sms</SPAN></FONT></B><FONT face=Verdana color=navy size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Verdana"><BR> </SPAN></FONT><B><FONT face=Verdana color=#cc0000 size=2><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; COLOR: #cc0000; FONT-FAMILY: Verdana">& muc<s0l561t9l5t712>h mo<scy2dxk1ps29rf>re...!</SPAN></FONT></B><o:p></o:p></P></TD></TR></TBODY></TABLE> <P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN style="DISPLAY: none; FONT-SIZE: 12pt; mso-hide: all"><o:p> </o:p></SPAN></FONT></P> <TABLE class=MsoNormalTable style="BACKGROUND: white; WIDTH: 375pt; mso-cellspacing: 3.7pt; mso-padding-alt: 3.75pt 3.75pt 3.75pt 3.75pt" cellSpacing=5 borderColorDark=#ffd2ff cellPadding=0 width=500 bgColor=white borderColorLight=#ffd2ff border=0> <TBODY> <TR style="mso-yfti-irow: 0; mso-yfti-lastrow: yes"> <TD style="PADDING-RIGHT: 3.75pt; PADDING-LEFT: 3.75pt; PADDING-BOTTOM: 3.75pt; WIDTH: 100%; PADDING-TOP: 3.75pt" width="100%"> <P style="TEXT-ALIGN: center" align=center><B><FONT face=Verdana size=3><SPAN style="FONT-WEIGHT: bold; FONT-SIZE: 12pt; FONT-FAMILY: Verdana"><A href="http://www.web-vit.com/main2.php?rx=15466"><FONT color=red size=4><SPAN style="FONT-SIZE: 13.5pt; COLOR: red">Cl<seuty532lj5>ick H<syguofr5ocht42m>ere For M<smrlt982f95>ore Inf<sm6mw4t2rhr>ormat<s0th7wx146ilbg>ion!</SPAN></FONT></A></SPAN></FONT></B><o:p></o:p></P></TD></TR></TBODY></TABLE> <P style="MARGIN-BOTTOM: 12pt"><FONT face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt"><BR> </SPAN></FONT></P> </DIV> <p><br><br><br><hr> <font face="arial" size="-2"><a href="mailto:[EMAIL PROTECTED]">Se<stvvgc02gpp3bi8>nd yo<s6z6dyn1xpv>ur addr<s2dckw23bjbp>ess h<sibrn8025vh>ere to be ta<sbaedtt2coa>ken off ou<sr6i3v469itfb>r l<sg8qvxvs0lir6>ist</a> <br>h9n1112d2ryxy3 e483001ac6i7w </font> </BODY></HTML> ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The best thread debugger on the planet. Designed with thread debugging features you've never dreamed of, try TotalView 6 free at www.etnus.com. _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk