A bug in 2.6 caused messages which hit BAYES_99 to be learned as ham, this has been fixed, you should upgrade.
Frederic Tarasevicius Internet Information Services, Inc. http://www.i-is.com/ PieterB wrote: > Can somebody explain me why a spammessage gets learned as ham? > > X-Spam-Status: Yes, hits=5.3 required=5.0 tests=BAYES_99,HTML_MESSAGE > autolearn=ham version=2.60 > > Pieter > > 8<-------------------------- > > > From [EMAIL PROTECTED] Sun Jan 25 00:18:38 2004 > Received: from localhost [127.0.0.1] by gewis.win.tue.nl > with SpamAssassin (2.60 1.212-2003-09-23-exp); > Sun, 25 Jan 2004 00:19:35 +0100 > From: "James Beatty" <[EMAIL PROTECTED]> > Subject: davidson curtsey coolidge compulsion berra > Date: Sun, 25 Jan 2004 01:12:11 +0300 > Message-Id: <[EMAIL PROTECTED]> > X-Spam-Level: ***** > X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on > gewis.win.tue.nl > X-Spam-DCC: x-mailer.co.uk: gewis.win.tue.nl 1192; Body=8 Fuz1=8 > Fuz2=8 > X-Spam-Flag: YES > X-Spam-Status: Yes, hits=5.3 required=5.0 tests=BAYES_99,HTML_MESSAGE > autolearn=ham version=2.60 > MIME-Version: 1.0 > Content-Type: multipart/mixed; > boundary="----------=_4012FD87.AA41E558" > X-Folder: spam5 > Status: RO > Content-Length: 8641 > Lines: 164 > > This is a multi-part message in MIME format. > > ------------=_4012FD87.AA41E558 > Content-Type: text/plain > Content-Disposition: inline > Content-Transfer-Encoding: 8bit > > Spam detection software, running on the system "gewis.win.tue.nl", has > identified this incoming email as possible spam. The original message > has been attached to this so you can view it (if it isn't spam) or > block > similar future email. If you have any questions, see > the administrator of that system for details. > > Content preview: bricklaying data substitute inoperable edwin gaston > coffman prolusion sear sop piper shari bern acquaint duffel > codetermine turpitude spade drab hull tog aileron benediction build > horseflesh sickroom [...] > > Content analysis details: (5.3 points, 5.0 required) > > pts rule name description > ---- ---------------------- > -------------------------------------------------- > 5.2 BAYES_99 BODY: Bayesian spam probability is 99 to > 100% [score: 1.0000] > 0.1 HTML_MESSAGE BODY: HTML included in message > > The original message was not completely plain text, and may be unsafe > to > open with some email clients; in particular, it may contain a virus, > or confirm that your address can receive spam. If you wish to view > it, it may be safer to save it to a file and open it with an editor. > > > ------------=_4012FD87.AA41E558 > Content-Type: message/rfc822; x-spam-type=original > Content-Description: original message before SpamAssassin > Content-Disposition: attachment > Content-Transfer-Encoding: 8bit > > Return-Path: <[EMAIL PROTECTED]> > Received: from kweetal.tue.nl (kweetal.tue.nl [131.155.3.6]) > by gewis.win.tue.nl (Postfix) with ESMTP id DA32721108 > for <[EMAIL PROTECTED]>; Sun, 25 Jan 2004 00:18:38 +0100 (CET) > Received: by kweetal.tue.nl (Postfix, from userid 40) > id 4E40F13B641; Sun, 25 Jan 2004 00:18:37 +0100 (CET) > Received: from 12-219-17-112.client.mchsi.com > (12-219-17-112.client.mchsi.com [12.219.17.112]) > by kweetal.tue.nl (Postfix) with SMTP id 7A2BF13B74B; > Sun, 25 Jan 2004 00:18:22 +0100 (CET) > Received: from [165.60.64.0] by 12.219.17.112 with HTTP; > Sun, 25 Jan 2004 00:17:11 +0200 > From: "James Beatty" <[EMAIL PROTECTED]> > Subject: davidson curtsey coolidge compulsion berra > Mime-Version: 1.0 > X-Mailer: hospital nutritive > Date: Sun, 25 Jan 2004 01:12:11 +0300 > Reply-To: "James Beatty" <[EMAIL PROTECTED]> > Content-Type: multipart/alternative; > boundary="95731644074591056620" > Message-Id: <[EMAIL PROTECTED]> > X-Spam-Flag: YES > X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) > on > kweetal.tue.nl > X-Spam-DCC: MessageCare: kweetal.tue.nl 1108; Body=1 Fuz1=1 Fuz2=1 > X-Spam-Report: * 0.5 HTML_20_30 BODY: Message is 20% to 30% HTML > * 0.0 HTML_MESSAGE BODY: HTML included in message > * 0.0 LINES_OF_YELLING BODY: A WHOLE LINE OF YELLING DETECTED > * 4.3 RCVD_IN_OPM RBL: Received via a relay in opm.blitzed.org > * [12.219.17.112 listed in opm.blitzed.org] > * 0.1 RCVD_IN_SORBS RBL: SORBS: sender is listed in SORBS > * [12.219.17.112 listed in dnsbl.sorbs.net] > * 0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org > * [12.219.17.112 listed in dnsbl.njabl.org] > * 4.3 RCVD_IN_OPM_HTTP RBL: OPM: sender is open HTTP CONNECT proxy > * [12.219.17.112 listed in opm.blitzed.org] > * 1.1 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org > * [<http://dsbl.org/listing?ip=12.219.17.112>] > * 1.1 RCVD_IN_NJABL_PROXY RBL: NJABL: sender is an open proxy > * [12.219.17.112 listed in dnsbl.njabl.org] > * 2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in > bl.spamcop.net > * [Blocked - see <http://www.spamcop.net/bl.shtml?12.219.17.112>] > * 4.3 RCVD_IN_OPM_SOCKS RBL: OPM: sender is open SOCKS proxy > * [12.219.17.112 listed in opm.blitzed.org] > * 1.1 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy > server > * [12.219.17.112 listed in dnsbl.sorbs.net] > X-Spam-Status: Yes, hits=19.1 required=6.3 > tests=HTML_20_30,HTML_MESSAGE, > LINES_OF_YELLING,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DSBL,RCVD_IN_NJABL, > RCVD_IN_NJABL_PROXY,RCVD_IN_OPM,RCVD_IN_OPM_HTTP,RCVD_IN_OPM_SOCKS, > RCVD_IN_SORBS,RCVD_IN_SORBS_SOCKS autolearn=no version=2.61 > X-Spam-Level: ******************* > X-Spambayes-Classification: spam; 1.00 > > --95731644074591056620 > Content-Type: text/plain; charset=us-ascii > Content-Transfer-Encoding: 8bit > > bricklaying data substitute inoperable edwin gaston coffman prolusion > sear sop > piper shari bern acquaint duffel codetermine turpitude spade > drab hull tog aileron benediction build horseflesh sickroom > > --95731644074591056620 > Content-Type: text/html; charset=us-ascii > Content-Transfer-Encoding: 8bit > > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> > <HTML><HEAD> > > <TITLE>Message</TITLE> > > <META content="MSHTML 6.00.2800.1276" name=GENERATOR></HEAD> > <BODY> > <DIV><!-- Converted from text/plain format --><FONT face=Arial size=2> > STILL NO LUCK ENRGAILNG IT?<BR> > <BR> > Our 2 pcodruts will work for you!<BR> > <BR> > 1. #1 Spupelment aavilable! - Works!<BR> > <A > HREF="http://www.tjmb.jlgvkadq.com=www.uvlsitbhz.tlyzxvrn.kiopexctu.com/v2/? AFF_ID=d1230&ultv=quxuxoh">ETNER > HERE</A><BR> <BR> > and<BR> > <BR> > 2. *New* Enahncement Oil - Get hard in 60 seocnds! Amzaing!<BR> > Like no ohter oil you've seen. <BR> > <A > HREF="http://www.iwscfgsj.msdh.com=www.dlqtrne.twjfleg.kiopexctu.com/x/?AFF_ ID=o1230&tgieuvlxgh=vgrl">ETENR > HERE</A><BR> <BR> > the 2 prdoucts work gerat togteher<BR> > <BR> > <BR> > ------------------------------------------------------------<BR> > <BR> > FOR WOEMN ONLY: <A > HREF="http://www.izrsb.vxtz.com=www.sltpdcpwkh.rjzm.kiopexctu.com/l/?AFF_ID= a1230&lgvmah=ijuilxms">TOCUH > HERE</A><BR> <BR> <BR> > <BR> > <BR> > <BR> > <BR> > <BR> > <BR> > <A > HREF="http://www.ltsk.jjpg.com=www.dbldsyyr.fongnuvbt.kiopexctu.com/homepage /?yaqsky=rbhwzi">Not > itnerseted</a><br></FONT></DIV></BODY></HTML> > mask militiamen alp bully despicable schizophrenic removal > calorimeter cos lexicon amalgam morphophonemic oases shrunken couple > stay aegean frustrate canberra wastewater during any urinal > husbandman affinity auger vaduz traversal cheshire stringent <br> > furthest chinamen molybdenum gastronomy domicile hydrant counselor > decrypt monica potash bellflower assist showman roundhouse patrolled > mercury zion smoothbore chlorate bravo teletype painful theory <br> > compassionate tariff westfield resonant diesel credible amok bolivia > conveyance eighteen barnett appointee accumulate boylston rutabaga > suspension arcing sobriquet <br> > ewe southeast laminar sacrifice upton randy gain afresh cache > nighthawk bureau vladivostok lurch audio inflicter mastodon breathy > scram camel bricklay brown droopy expectation carolinian paragon lien > damsel infinitesimal ordinance inaccessible vaughn condolence scour > deane eloquent bustard dither <br> > brushwork weaponry nostril creamery rally method naked tautology > downstate reciprocity fob lam bankruptcy buses doldrums miser <br> > virtuous cockpit monomial t's foss cessna estimable everything > homeric doubloon pantry grossman dross <br> > bullish cartridge mccarthy beget clandestine augite g's autocorrelate > malign virtue conference petty professional cuckoo burly oligoclase > rector pakistan duchess confidante flee youthful alpine bile clarity > ocarina laocoon abelian relief allure jocose lock breastplate > superfluity bequest smooth medico duma locke fill <br> flanders > habituate grime circumpolar sewage alderman norman aspartic detergent > impish cartography infirmary thousandfold bourbaki quod vinson > sagittal chairlady penetrate cobra priest brisbane cottonmouth > anamorphic amiss deforest teletypesetting plastisol <br> > hertz contributory social aware indelible landscape contractual icky > assumption sumner dyadic depredate inherit flowery buzzer miracle al > exceed hardscrabble scurrilous junctor bakelite torrent elmira feb > swank salina santiago fortune strut british mcpherson > counterintuitive greek adulterate blaze bedford converge startle <br> > camden bluebook expectorant impertinent aft conceit chilean morel > delude godfrey deniable capstan actinic studio chloride copter > caustic speedy cottrell fit piper beta dialect wendy role collapsible > total baptiste lofty crowberry enforceable huckleberry sinclair tied > <br> > > > --95731644074591056620-- > > > ------------=_4012FD87.AA41E558-- > > > Groetjes, > > Pieter ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
