[SAtalk] Negative score from spamd, positive from spamassassin script

up Sat, 20 Sep 2003 11:08:26 -0700

I've been getting some spams coming in with negative scores like this
-7.7, but when I run it through the spamassassin debugger, it comes out
with a modest postive score of 3.7.  I'm not using any user prefs, either.


From [EMAIL PROTECTED] Fri Sep 19 23:36:23 2003
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 23284 invoked by uid 85); 20 Sep 2003 03:35:17 -0000
Received: from [EMAIL PROTECTED] by mail.pil.net by uid 82 with
    qmail-scanner-1.16
 (spamassassin: 2.54.  Clear:SA:0(-7.7/6.0):.
 Processed in 2.049156 secs); 20 Sep 2003 03:35:17 -0000
Received: from unknown (HELO microsoft.com) (219.94.60.107)
  by richard2.pil.net with SMTP; 20 Sep 2003 03:35:14 -0000
Date: Sat, 20 Sep 2003 03:32:30 +0000
From: Capirukom <[EMAIL PROTECTED]>
Subject: Re [9]:
To: James <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
In-Reply-To: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
Reply-To: Nirahevur <[EMAIL PROTECTED]>
Sender: Syzitiv <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
    boundary="----=_NextPart_LD91BJFF2HH5G_0K51K7JKH5I"
X-Spam-Status: No, hits=3.7 required=6.0
        tests=HTML_60_70,HTML_FONT_COLOR_UNSAFE,HTML_IMAGE_ONLY_04,
              HTML_IMAGE_RATIO_12,HTML_WITH_BGCOLOR,HTTP_ESCAPED_HOST,
              HTTP_EXCESSIVE_ESCAPES,IN_REP_TO,MIME_BOUND_NEXTPART,
              REFERENCES,USERPASS
        version=2.54
X-Spam-Level: ***
X-Spam-Checker-Version: SpamAssassin 2.54 (1.174.2.17-2003-05-11-exp)

<html>
<head>
<title>RMGTY KC</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"></head>
<body bgcolor="#FFFFF3" text="#000000"><p><font color="#FFFFF5">Yes, come by <a 
href="http://%32%31%31%2E%33%34%2E%32%31%32%2E%31%33:%39%35%37/[EMAIL PROTECTED]"><img 
src="cid:photo.gif"; width="422" height="53" border="0"></a> êàê äåëû in 1816</font></p>
<p><font color="#FFFFF2">do you work? in 1827 UUD Those who say PrGW CAiufRf When it 
was To my knoweledge.</font></p>
<p><font color="#FFFFF5">No, I can't in 1990 <a 
href="http://%32%31%31%2E%33%34%2E%32%31%32%2E%31%33:%39%35%37/[EMAIL PROTECTED]"><img 
src="cid:pic.gif"; width="35" height="6" border="0"></a> What's wwrong? Congress to  
It's funny</font></p>
</body>
</html>
    [ Part 1.2, Image/GIF  2.2KB. ]
    [ Unable to print this part. ]


    [ Part 1.3, Image/GIF  112bytes. ]
    [ Unable to print this part. ]

The message itself:
From [EMAIL PROTECTED] Fri Sep 19 23:36:23 2003
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 23284 invoked by uid 85); 20 Sep 2003 03:35:17 -0000
Received: from [EMAIL PROTECTED] by mail.pil.net by uid 82 with
    qmail-scanner-1.16
 (spamassassin: 2.54.  Clear:SA:0(-7.7/6.0):.
 Processed in 2.049156 secs); 20 Sep 2003 03:35:17 -0000
X-Spam-Status: No, hits=-7.7 required=6.0
Received: from unknown (HELO microsoft.com) (219.94.60.107)
  by richard2.pil.net with SMTP; 20 Sep 2003 03:35:14 -0000
Date: Sat, 20 Sep 2003 03:32:30 +0000
From: Capirukom <[EMAIL PROTECTED]>
Subject: Re [9]:
To: James <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
In-Reply-To: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
Reply-To: Nirahevur <[EMAIL PROTECTED]>
Sender: Syzitiv <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
    boundary="----=_NextPart_LD91BJFF2HH5G_0K51K7JKH5I"

<html>
<head>
<title>RMGTY KC</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"></head>
<body bgcolor="#FFFFF3" text="#000000"><p><font color="#FFFFF5">Yes, come by <a 
href="http://%32%31%31%2E%33%34%2E%32%31%32%2E%31%33:%39%35%37/[EMAIL PROTECTED]"><img 
src="cid:photo.gif"; width="422" height="53" border="0"></a> êàê äåëû in 1816</font></p>
<p><font color="#FFFFF2">do you work? in 1827 UUD Those who say PrGW CAiufRf When it 
was To my knoweledge.</font></p>
<p><font color="#FFFFF5">No, I can't in 1990 <a 
href="http://%32%31%31%2E%33%34%2E%32%31%32%2E%31%33:%39%35%37/[EMAIL PROTECTED]"><img 
src="cid:pic.gif"; width="35" height="6" border="0"></a> What's wwrong? Congress to  
It's funny</font></p>
</body>
</html>
    [ Part 1.2, Image/GIF  2.2KB. ]
    [ Unable to print this part. ]


    [ Part 1.3, Image/GIF  112bytes. ]
    [ Unable to print this part. ]


James Smallacombe                     PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED]                                                           http://3.am
=========================================================================



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] Negative score from spamd, positive from spamassassin script

Reply via email to