Date: Thu, 15 Jan 2004 12:17:03 +0500 X-Mailer: Earthlink Web Access Mail version 3.0 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--350253119110483" X-Priority: 5 X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on wa9als.com X-Spam-Status: No, hits=-4.9 required=2.4 tests=BIZ_TLD,DATE_IN_PAST_12_24, HABEAS_SWE,HTML_50_60,HTML_MESSAGE,MIME_HTML_ONLY, MIME_HTML_ONLY_MULTI,RCVD_IN_SORBS,WHY_WAIT autolearn=ham version=2.60 X-Spam-Level: Status:
OK, it was a negative score. I'm a newB and didn't know any of the tests gave negative scores. This is a little different from the spam I usually get. Although it was common in the sense that it was about drugs for sale, it was CC'd to what must be all the email addys starting with v or w and the domain starband.net (my home ISP where I have an email addy). In addition to the usual misspelled drug names in the subject, twice in the body of the html advertisement, there were what appear to be biblical quotes - must be another "injection" of stuff to throw off spam checkers, in this case not nonsense words, but "good" words! The sending domain appears as email.com.cn, but that was "assigned". Apparently autolearn is now turned ON, but it used to be OFF! how would that change? It's never been on since I've started using SA until this afternoon, and I have issued any SA commands or changed (or even looked at) any config files. I did restart spamd one time, but as I said, autolearn has never been on since I started, and the computer has been rebooted a few times. ----- Original Message ----- From: "Gary Smith" <[EMAIL PROTECTED]> To: "John Fleming" <[EMAIL PROTECTED]> Sent: Thursday, January 15, 2004 6:05 PM Subject: RE: [SAtalk] Above threshhold but not tagged > There are a couple canned tests that assign it a negative number. Take a look the the stock .cf files that come with it. grep them and search for "HABEAS". This one rule alone gives it a -8. These files should be under /usr/share/spamassassin. You will see what I mean. I have also included my /e/mail/spamassassin/local.cf > > # This is the right place to customize your installation of SpamAssassin. > # rewrite_subject 0 > # report_safe 1 > # trusted_networks 212.17.35. > report_safe 0 > required_hits 4 > rewrite_subject 1 > subject_tag [Suspected SPAM] > > Hope that helps. > > Gary > > > -----Original Message----- > From: John Fleming [mailto:[EMAIL PROTECTED] > Sent: Thu 1/15/2004 2:29 PM > To: Gary Smith > Cc: > Subject: Re: [SAtalk] Above threshhold but not tagged > > > > I'm REALLY lost now! Yes, it did actually get a score of -4.9, so that's > why it didn't get tagged (below my threshhold). However, now I have to ask > how it gets that score - I only have one test that gets a minus score, and > that gives a -500, much lower than any of the positives of this particular > message. > > Another thing - Mine notifications always end in something like > "autolearn=no", and on this message it says "autolearn=ham". > > I don't even know how to use the learn features yet, and therefore have not > been trying to mess with any command like that at all! All messages were > being scored and tagged appropriately until this one came along. How does > autolearn get changed without my intervention and/or what would do that and > how does it explain this message getting a minus score? > - JOhn > \ > > ----- Original Message ----- > From: "Gary Smith" <[EMAIL PROTECTED]> > To: "John Fleming" <[EMAIL PROTECTED]> > Sent: Thursday, January 15, 2004 3:48 PM > Subject: RE: [SAtalk] Above threshhold but not tagged > > > > Sounds like a config issue. Has it worked in the past? > > > > Gary Smith > > > > -----Original Message----- > > From: [EMAIL PROTECTED] on behalf of John > Fleming > > Sent: Thu 1/15/2004 12:37 PM > > To: [EMAIL PROTECTED] > > Cc: > > Subject: [SAtalk] Above threshhold but not tagged > > > > > > > > Newbie question - I just got one of those d-rug type emails that scored > > several points above my spam cutoff and wasn't on a whitelist, yet the > > subject wasn't tagged as expected. What can cause that? tnx > > > > > > > > > > ------------------------------------------------------- > > The SF.Net email is sponsored by EclipseCon 2004 > > Premiere Conference on Open Tools Development and Integration > > See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. > > http://www.eclipsecon.org/osdn > > _______________________________________________ > > Spamassassin-talk mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > > > > > > > > > > ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
