Re: [SAtalk] Negative score from spamd, positive from spamassassin script

Fred I-IS.COM Sat, 20 Sep 2003 12:33:39 -0700

I noticed a small difference, I don't know if this has something to do with
it, but in the bottom message, with -7.7, where are the other SA headers?
Like which tests fired?


Frederic Tarasevicius
Internet Information Services, Inc.



[EMAIL PROTECTED] wrote:
> I've been getting some spams coming in with negative scores like this
> -7.7, but when I run it through the spamassassin debugger, it comes
> out
> with a modest postive score of 3.7.  I'm not using any user prefs,
> either.
>
> From [EMAIL PROTECTED] Fri Sep 19 23:36:23 2003
> Return-Path: <[EMAIL PROTECTED]>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 23284 invoked by uid 85); 20 Sep 2003 03:35:17 -0000
> Received: from [EMAIL PROTECTED] by mail.pil.net by uid 82 with
>     qmail-scanner-1.16
>  (spamassassin: 2.54.  Clear:SA:0(-7.7/6.0):.
>  Processed in 2.049156 secs); 20 Sep 2003 03:35:17 -0000
> Received: from unknown (HELO microsoft.com) (219.94.60.107)
>   by richard2.pil.net with SMTP; 20 Sep 2003 03:35:14 -0000
> Date: Sat, 20 Sep 2003 03:32:30 +0000
> From: Capirukom <[EMAIL PROTECTED]>
> Subject: Re [9]:
> To: James <[EMAIL PROTECTED]>
> References: <[EMAIL PROTECTED]>
> In-Reply-To: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Reply-To: Nirahevur <[EMAIL PROTECTED]>
> Sender: Syzitiv <[EMAIL PROTECTED]>
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
>     boundary="----=_NextPart_LD91BJFF2HH5G_0K51K7JKH5I"
> X-Spam-Status: No, hits=3.7 required=6.0
> tests=HTML_60_70,HTML_FONT_COLOR_UNSAFE,HTML_IMAGE_ONLY_04,
>       HTML_IMAGE_RATIO_12,HTML_WITH_BGCOLOR,HTTP_ESCAPED_HOST,
>       HTTP_EXCESSIVE_ESCAPES,IN_REP_TO,MIME_BOUND_NEXTPART,
>       REFERENCES,USERPASS
> version=2.54
> X-Spam-Level: ***
> X-Spam-Checker-Version: SpamAssassin 2.54 (1.174.2.17-2003-05-11-exp)
>
> <html>
> <head>
> <title>RMGTY KC</title>
> <meta http-equiv="Content-Type" content="text/html;
> charset=iso-8859-1"></head>
> <body bgcolor="#FFFFF3" text="#000000"><p><font color="#FFFFF5">Yes,
> come by <a
>
href="http://%32%31%31%2E%33%34%2E%32%31%32%2E%31%33:%39%35%37/index.php?m=j
[EMAIL PROTECTED]"><img
> src="cid:photo.gif"; width="422" height="53" border="0"></a> êàê äåëû
> in 1816</font></p>
> <p><font color="#FFFFF2">do you work? in 1827 UUD Those who say PrGW
> CAiufRf When it was To my knoweledge.</font></p>
> <p><font color="#FFFFF5">No, I can't in 1990 <a
>
href="http://%32%31%31%2E%33%34%2E%32%31%32%2E%31%33:%39%35%37/index.php?ema
[EMAIL PROTECTED]"><img
> src="cid:pic.gif"; width="35" height="6" border="0"></a> What's
> wwrong? Congress to  It's funny</font></p>
> </body>
> </html>
>     [ Part 1.2, Image/GIF  2.2KB. ]
>     [ Unable to print this part. ]
>
>
>     [ Part 1.3, Image/GIF  112bytes. ]
>     [ Unable to print this part. ]
>
> The message itself:
> From [EMAIL PROTECTED] Fri Sep 19 23:36:23 2003
> Return-Path: <[EMAIL PROTECTED]>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 23284 invoked by uid 85); 20 Sep 2003 03:35:17 -0000
> Received: from [EMAIL PROTECTED] by mail.pil.net by uid 82 with
>     qmail-scanner-1.16
>  (spamassassin: 2.54.  Clear:SA:0(-7.7/6.0):.
>  Processed in 2.049156 secs); 20 Sep 2003 03:35:17 -0000
> X-Spam-Status: No, hits=-7.7 required=6.0
> Received: from unknown (HELO microsoft.com) (219.94.60.107)
>   by richard2.pil.net with SMTP; 20 Sep 2003 03:35:14 -0000
> Date: Sat, 20 Sep 2003 03:32:30 +0000
> From: Capirukom <[EMAIL PROTECTED]>
> Subject: Re [9]:
> To: James <[EMAIL PROTECTED]>
> References: <[EMAIL PROTECTED]>
> In-Reply-To: <[EMAIL PROTECTED]>
> Message-ID: <[EMAIL PROTECTED]>
> Reply-To: Nirahevur <[EMAIL PROTECTED]>
> Sender: Syzitiv <[EMAIL PROTECTED]>
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
>     boundary="----=_NextPart_LD91BJFF2HH5G_0K51K7JKH5I"
>
> <html>
> <head>
> <title>RMGTY KC</title>
> <meta http-equiv="Content-Type" content="text/html;
> charset=iso-8859-1"></head>
> <body bgcolor="#FFFFF3" text="#000000"><p><font color="#FFFFF5">Yes,
> come by <a
>
href="http://%32%31%31%2E%33%34%2E%32%31%32%2E%31%33:%39%35%37/index.php?m=j
[EMAIL PROTECTED]"><img
> src="cid:photo.gif"; width="422" height="53" border="0"></a> êàê äåëû
> in 1816</font></p>
> <p><font color="#FFFFF2">do you work? in 1827 UUD Those who say PrGW
> CAiufRf When it was To my knoweledge.</font></p>
> <p><font color="#FFFFF5">No, I can't in 1990 <a
>
href="http://%32%31%31%2E%33%34%2E%32%31%32%2E%31%33:%39%35%37/index.php?ema
[EMAIL PROTECTED]"><img
> src="cid:pic.gif"; width="35" height="6" border="0"></a> What's
> wwrong? Congress to  It's funny</font></p>
> </body>
> </html>
>     [ Part 1.2, Image/GIF  2.2KB. ]
>     [ Unable to print this part. ]
>
>
>     [ Part 1.3, Image/GIF  112bytes. ]
>     [ Unable to print this part. ]
>
>
> James Smallacombe       PlantageNet, Inc. CEO and Janitor
> [EMAIL PROTECTED]     http://3.am
> =========================================================================
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Re: [SAtalk] Negative score from spamd, positive from spamassassin script

Reply via email to