Hello Kenneth, Wednesday, January 7, 2004, 10:02:44 AM, you wrote:
KP> --On Wednesday, January 07, 2004 11:38 AM -0600 [EMAIL PROTECTED] wrote: >> Attached is a spam that seems to sneak by us all of the time. Anyone >> know of a good rule to catch this? KP> X-Spam-Status: No, hits=5.9 required=6.0 tests=BAYES_50,BigEvilList_191, KP> HTML_MESSAGE,NORMAL_HTTP_TO_IP,RCVD_IN_NJABL,RCVD_IN_NJABL_PROXY, KP> RCVD_IN_SORBS,RCVD_IN_SORBS_SOCKS,SUBJECT_LIGHT autolearn=no KP> version=2.61 KP> The problem is your threshold. The rules are tuned to a threshold of 5, and KP> the score exceeds that, so SA has done its job. Agreed. I run with a conservative 9.0 required hits, and because of that I've increased the scores of several dozen distribution rules. If you increase the scores of the various network blacklist rules shown by 20%, this spam will be correctly flagged with your threshold. Bob Menschel ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
