At Sat Jan 17 13:53:50 2004, Carl R. Friend wrote: > The version in my case is 2.60 with a custom ruleset of my own > called 20040105_00. 2.60 handles this image-spam. Here's the > header generated from a test of your message and some dummy > headers presented to spamssassin:
This isn't a very accurate way of checking, although there's not much you can do without the original message. > X-Spam-Report: > * 1.0 DATE_MISSING Missing Date: header Presumably missing from your dummy headers - quite likely not missing from the spam. > * 1.9 FROM_NO_LOWER 'From' has no lower-case characters You don't know the original from address, so this may be bogus. > * 0.0 HTML_MESSAGE BODY: HTML included in message > * 0.3 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags > * 1.1 HTML_90_100 BODY: Message is 90% to 100% HTML > * 3.2 HTML_IMAGE_ONLY_02 BODY: HTML: images with 0-200 bytes of words > X-Spam-Status: Yes, hits=7.5 required=4.5 tests=DATE_MISSING,FROM_NO_LOWER, > HTML_90_100,HTML_IMAGE_ONLY_02,HTML_MESSAGE,HTML_TAG_BALANCE_BODY > autolearn=no version=2.60-crf_2.60_20040105_00 > X-Spam-Level: ******* > > The operative test here is HTML_IMAGE_ONLY_02 BODY. (Note that > I overloaded the score in my custom configuration -- the real score > is 2.244.) OK, so if you take off your additional 1.0 for that particular rule, 1.0 for DATE_MISSING, and 1.9 for FROM_NO_LOWER (since we don't know whether or not those two hit on the original message which we haven't seen), the 7.5 total comes down to 3.6, which isn't going to get tagged as ham by a default SA install. Martin -- Martin Radford | "Only wimps use tape backup: _real_ [EMAIL PROTECTED] | men just upload their important stuff -o) Registered Linux user #9257 | on ftp and let the rest of the world /\\ - see http://counter.li.org | mirror it ;)" - Linus Torvalds _\_V ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
