Are you completely certain it didn't match a whitelist and wasn't authenticated? I'm only asking because every other bug report about the header blacklist has actually turned out to be from a whitelisted source.
If that's not the case, could you send me the entire spam message and your configuration file(s) so I can try to reproduce the problem? -- Sam Clippinger On Dec 28, 2012, at 5:20 AM, Marcin Orlowski wrote: > Hi, > > I got header filter with entries: > > Subject: Czy dysponujesz dwoma wolnymi godzinami w tygodniu? Oto jak zarobc > 185 EUR w tym czasie.* > From:*>,*<* > > but despite of two potentially matching rules this spam passed by. Any ideas > why? > > Return-Path: <[email protected]> > X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on n01.xxxxxxxx > X-Spam-Report: > * 0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL > * [213.195.165.242 listed in zen.spamhaus.org] > * 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT > * [213.195.165.242 listed in bb.barracudacentral.org] > * 1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist > * [URIs: infopraca-pl.com] > * 0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1 > * 0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags > * 0.0 HTML_MESSAGE BODY: HTML included in message > * 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts > * 1.8 URIBL_BLACK Contains an URL listed in the URIBL blacklist > * [URIs: infopraca-pl.com] > * 0.1 MISSING_MID Missing Message-Id: header > * 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS > * 1.0 HELO_NO_DOMAIN Relay reports its domain incorrectly > Received: (qmail 14001 invoked from network); 28 Dec 2012 06:38:07 -0000 > Received: from unknown (HELO netiaspot) (213.195.165.242) > by n01 with SMTP; 28 Dec 2012 06:38:07 -0000 > Date: Fri, 28 Dec 2012 07:49:04 +0100 > From: <os@xxxxxxxxxx>, > <carlos-allegro@xxxxxxxxxx> > To: <os@xxxxxxxxxxxx>, > <carlos-allegro@xxxxxxxxxxxxxx> > Subject: Czy dysponujesz dwoma wolnymi godzinami w tygodniu? Oto jak zarobc > 185 EUR w tym czasie. > X-Mailer: ldnijbebax > MIME-Version: 1.0 > Content-Type: text/html; > charset=unicode > Content-Transfer-Encoding: 7bit > > > Regards, > -- > "Daddy, what "Formatting drive C:" means?"... > > Marcin http://wfmh.org.pl/carlos/ > _______________________________________________ > spamdyke-users mailing list > [email protected] > http://www.spamdyke.org/mailman/listinfo/spamdyke-users _______________________________________________ spamdyke-users mailing list [email protected] http://www.spamdyke.org/mailman/listinfo/spamdyke-users
