Hi, i've attahced a very tricky SPAM mail that has been scored with 0.8 points, what can be done with this kind of SPAM?. Thanks German
Bueno, primero que nada, por fin aparece otro argentino en la lista! Ya creía que era el único que tiraba para estos lados...
Segundo, dále al sa-learn sobre el mensaje en particular, y que veas los resultados antes y después:
--Antes de hacer sa-learn:
X-Spam-Checker-Version: SpamAssassin 2.60-cvs (1.195-2003-06-30-exp) on
nahuel.biol.unlp.edu.ar
X-Spam-Level: **
X-Spam-Status: No, hits=2.2 required=5.0 tests=BLANK_LINES_70_80,DATE_IN_PAST_12_24,
FORGED_RCVD_HELO,HTML_50_60,HTML_FONTCOLOR_BLUE,HTML_FONTCOLOR_RED,
HTML_FONTCOLOR_UNKNOWN,HTML_FONTCOLOR_UNSAFE,HTML_FONT_BIG,
HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,HTML_SHOUTING3,MIME_HTML_ONLY,
RCVD_IN_NJABL,RCVD_IN_SORBS,RCVD_NUMERIC_HELO autolearn=no
version=2.60-cvs
X-Spam-Report: * 0.7 RCVD_NUMERIC_HELO Received: contains a numeric HELO
* 0.1 HTML_FONTCOLOR_UNKNOWN BODY: HTML font color is unknown to us
* 0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.1 HTML_FONT_BIG BODY: HTML has a big font
* 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to background
* 0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette
* 0.0 HTML_SHOUTING3 BODY: HTML has very strong "shouting" markup
* 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 0.2 HTML_50_60 BODY: Message is 50% to 60% HTML
* 0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red
* 0.6 BLANK_LINES_70_80 BODY: Message body has 70-80% blank lines
* 0.0 FORGED_RCVD_HELO Received: contains a forged HELO
* 0.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
* 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
* [217.2.225.127 listed in dnsbl.sorbs.net]
* 0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
* [217.2.225.127 listed in dnsbl.njabl.org]
--Y habiendo aprendido el mensaje la base Bayes:
Detalles del análisis: (5.2 puntos, 5.0 requeridos)
0.7 RCVD_NUMERIC_HELO Received: contains a numeric HELO
0.1 HTML_FONTCOLOR_UNKNOWN BODY: HTML font color is unknown to us
0.1 HTML_FONTCOLOR_BLUE BODY: HTML font color is blue
0.0 HTML_MESSAGE BODY: HTML included in message
0.1 HTML_FONT_BIG BODY: HTML has a big font
0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar to background
0.1 HTML_FONTCOLOR_UNSAFE BODY: HTML font color not in safe 6x6x6 palette
0.0 HTML_SHOUTING3 BODY: HTML has very strong "shouting" markup
3.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.2 HTML_50_60 BODY: Message is 50% to 60% HTML
0.1 HTML_FONTCOLOR_RED BODY: HTML font color is red
0.6 BLANK_LINES_70_80 BODY: Message body has 70-80% blank lines
0.0 FORGED_RCVD_HELO Received: contains a forged HELO
0.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS
[217.2.225.127 listed in dnsbl.sorbs.net]
0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
[217.2.225.127 listed in dnsbl.njabl.org]---------------- Fin de los resultados de SpamAssassin -----------------
Otra cosa más que enseñarle esta clase de mensajes a la Bayes no te queda, pero trabaja treméndamente bien.
Qué tipo de instalación estás usando? Yo corro Sendmail/Spamass-Milter/SA-2.60-CVS, junto con un antivirus
Salu2,
Luis Hernán Otegui
Administrador de Red
Facultad de Ciencias Exactas
UNLP
----------------------------------------------------
GNU-GPL: "May The Source Be With You..."
----------------------------------------------------_________________________________________________________________
Charla con tus amigos en línea mediante MSN Messenger: http://messenger.yupimsn.com/
------------------------------------------------------- This SF.Net email sponsored by: Parasoft Error proof Web apps, automate testing & more. Download & eval WebKing and get a free book. www.parasoft.com/bulletproofapps1 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
