On Mon, 26 Jan 2004, Paul Diaguila wrote:

> No Bayes db yet, but I would think the one rule would score it a 5....
>
> Paul
>
> Covington, Chris wrote:
>
> >Your Bayes must be hosed if what you think is spam gets BAYES_00.
> >
> >Chris
[snip..]
> >Greetings
> >
> >Using SA Ver. 2.63 with Mimedefang, and still quite a bit of spam is
> >getting through.  Have all the current BigEvil, ect...   As an example,
> >a rule is in place in local.cf
> >
> >header   SUBJECT_ENCODED_MY_TEST  Subject:raw =~ /=\?.*\?=/i
> >describe SUBJECT_ENCODED_MY_TEST  Subject begins with =?
> >score    SUBJECT_ENCODED_MY_TEST  5.0
> >
> >When a message comes in:
> >
> >Subject:
> >=?ISO-8859-1?b?V2UgaGF2ZSB3aGF0IHlvdSBuZWVkIC0gQ2hlYXBlc3QgcHJlc2NyaXB0a
> >W8vbnMgb24gdGhlIGludGVybmV0?=
> >Content-Type: multipart/alternative;
> >        boundary="----=_NextPart_000_0CAC_A6ABA171.138272BD"
> >X-Spam-Score: 3.422
> >BAYES_00,FORGED_OUTLOOK_TAGS,HTML_50_60,HTML_IMAGE_ONLY_02,HTML_MESSAGE,
> >HTML_TAG_BALANCE_BODY,RM_rb_ANCHOR,RM_rb_BODY,RM_rb_HTML,SUBJECT_ENCODED
> >_MY_TEST
> >X-Scanned-By: MIMEDefang 2.30 (www . roaringpenguin . com / mimedefang)
> >
> >???
> >
> >thanks...
> >
> >Paul

Paul,
Look at the 'X-Spam-Score' report line.
If you read it you will see 'SUBJECT_ENCODED_MY_TEST' so that rule -did-
hit. You will -also- see 'BAYES_00' So there is a Bayes db somewhere and
it said "this is not spam, so I will score this message at -5.6" which
nullified your SUBJECT_ENCODED_MY_TEST sore.

Bottom line is you do have Bayes running somewhere on your system
and it is not properly trained. Rather that writing more rules, I'd
suggest that you concentrate on getting it trained and I think that
you'll be happier.


-- 
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to