1) SA Developers: PLEASE provide some method whereby end-users like me can implement header, body, and uri rules in user_prefs.
2) Can anyone run the spam below against a vanilla ruleset, 2.5[45] and/or 2.6, and let me know if this spam should have been caught under 2.54?
With 2.60-CVS from just before the freeze (nothing more's being done on rules p.t.):
Spam detection software (installed by you, your system administrator, or your internet service provider) has identified an incoming email as possible spam. The original message has been attached to this report so you can view it (if it isn't spam) or block similar future email. If you have any questions, see [EMAIL PROTECTED] for details.
Content preview: STOP PAYING FOR PORN!!! The World's FIRST Absolutely FREE Adult Megasite! HOT GIRLS ON WEBCAMLive Sex Shows Full-Length Movies Beautiful PictorialsErotic Stories and Games Did we mention its FREE? [...]
Content analysis details: (37.6 points, 6.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 NO_REAL_NAME From: does not include a real name
3.6 RCVD_FAKE_HELO_DOTCOM Received contains a faked HELO hostname
2.9 MEGA_SITE BODY: Possible porn - Mega Porn
4.3 FREE_PORN BODY: Possible porn - Free Porn
0.4 ALL_CAP_PORN BODY: Possible porn - in ALL CAPS
0.1 EXCUSE_3 BODY: Claims you can be removed from the list
0.9 ADULT_SITE BODY: Possible porn - Adult Web Sites
1.1 COMPLETELY_FREE BODY: No such thing as a free lunch (2)
6.3 BAYES_99 BODY: Bayesian classifier spam probability is 99 to 100%
[score: 0.9995]
1.0 FORGED_RCVD_HELO Received: contains a forged HELO
2.2 FORGED_RCVD_TRAIL trail of Received: headers seems to be forged
1.2 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
[68.38.45.102 listed in dnsbl.njabl.org]
1.2 RCVD_IN_RFCI RBL: Received via a relay in ipwhois.rfc-ignorant.org
[Inaccurate or missing WHOIS data]
4.3 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
[<http://dsbl.org/listing?ip=68.38.45.102>]
1.0 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server
[68.38.45.102 listed in dnsbl.sorbs.net]
1.0 RCVD_IN_OSIRU_PROXY RBL: OSIRU: sender is open proxy server
[68.38.45.102 listed in relays.osirusoft.com]
1.0 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
[68.38.45.102 listed in dnsbl.sorbs.net]
1.0 RCVD_IN_SORBS_MISC RBL: SORBS: sender is open proxy server
[68.38.45.102 listed in dnsbl.sorbs.net]
1.0 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy
[68.38.45.102 listed in dnsbl.njabl.org]
0.5 RCVD_IN_OSIRU RBL: OSIRU: Received via a relay in relays.osirusoft.com
[68.38.45.102 listed in relays.osirusoft.com]
1.0 RCVD_IN_SORBS_SMTP RBL: SORBS: sender is open SMTP relay
[68.38.45.102 listed in dnsbl.sorbs.net]
0.0 CLICK_BELOW Asks you to click below
0.6 PRIORITY_NO_NAME Message has priority setting, but no X-Mailer
-- Tony Earnshaw
Working to get a life
http://j-walk.com/blog/docs/conference.htm http://www.billy.demon.nl Mail: [EMAIL PROTECTED]
------------------------------------------------------- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission! INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
