At Tue Dec 30 11:13:46 2003, S.Neukirchner wrote:
> 
> Hello,
> I am using SpamAssassin 2.55 with procmail, my MTA is sendmail.
> 
> Sometimes I get mails who are marked as spam but they are not going
> to the spam mailbox as I told in procmailcr:
> 
> So I looked at the mail in my box market as spam and found out
> that the points in the header are different from the points in the =
> report:

For some reason your messages are being run through spamassassin
twice.  After the first pass, the original message is converted into
an attachment, and this new message is being sent through SA again.

One important feature of SA is that it examines the message header as
well as the body.  The newly generated message lacks most of the spam
indications that were in the original message's header and hence the
second pass will normally get a lower score (as you've seen).

For example, obvious issues here will be:

> *  1.3 -- trail of Received: headers seems to be forged
> *  0.5 -- Message has X-MSMail-Priority, but no X-MimeOLE
> *  3.5 -- Forged mail pretending to be from The Bat!
> *  0.6 -- Message looks like Outlook, but isn't

Martin
-- 
Martin Radford              |   "Only wimps use tape backup: _real_ 
[EMAIL PROTECTED] | men just upload their important stuff  -o)
Registered Linux user #9257 |  on ftp and let the rest of the world  /\\
- see http://counter.li.org |       mirror it ;)"  - Linus Torvalds _\_V


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to