Sigh.

This is the first time I've seen a spam come in with a phony Habeas mark
(link to spam below). Perhaps I've just been lucky up to this point...anyone
else seen this? Of course, I reported it immediately to Habeas. Let's see
what they do.

An unfortunate side effect of how SA scores mail with the habeas mark: even
though this spam scored plenty of positive tests, the habeas score dragged
it down so low that it was autolearned as ham. To fix, I ran sa-learn
--forget over the message and then re-learned it as spam, removing the
habeas mark beforehand. Is there maybe a better way SpamAssassin could
handle habeas marked email, to counteract this apparent vulnerability?

Here's a link to the spam:

http://carter.to/spam/phonyHabeas.txt

BTW, the "CarterEvilList" score is my own personal list of evil servers in
the style of BigEvil...actually I need to send those off to the BigEvil
maintainer.

Regards;

DaC




-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to