I'm using a filtering rule that checks for a minimum amount of *'s in the spam-level header. If it finds 6 or more then the message is redirected to my spam folder for later review.
I was suprised to see this message did not get redirected as it scored 6. Yet the spam level has only 5 *'s. I'm using SpamAssassin 3.01, any comments? Here are the headers of the message. Subject: ***SPAM 6.0*** Cheap online medication here Date: Fri, 10 Dec 2004 17:58:28 +0200 X-Spam-Prev-Subject: Cheap online medication here X-Spam-Tests: BAYES_50=2.3,HTML_50_60=0.087,HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.177,RCVD_HELO_IP_MISMATCH=2.178, RCVD_NUMERIC_HELO=1.248 X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on avas.cnc.bc.ca X-Spam-See: http://avas.cnc.bc.ca for information about anti-spam scanning. X-Spam-Scored: 6.0 out of a required 5.0 X-Spam-Summary: 2.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should 1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 0.0 HTML_MESSAGE BODY: HTML included in message 2.3 BAYES_50 BODY: Bayesian spam probability is 40 to 60% [score: 0.5001] 0.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 HTML_50_60 BODY: Message is 50% to 60% HTML X-Spam-Autolearn: Autolearned as no X-Spam-Scan-Date: Scanned on Fri, 10 Dec 2004 08:00:29 -0800 X-Spam-DCCD-Results: CollegeOfNewCaledonia, avas 1189; Body=1 Fuz1=1 Fuz2=1 X-Spam-Level: ***** X-Spam-RBL-Results: Return-Path: <[EMAIL PROTECTED]> X-Rcpt-To: <[EMAIL PROTECTED]> X-DPOP: Version number supressed Y-UIDL: 1102696774.4892 ========================= Kevin W. Gagel Network Administrator Information Technology Services (250) 561-5848 local 448 -------------------------------------------------------------- The College of New Caledonia, Visit us at http://www.cnc.bc.ca Virus scanning is done on all incoming and outgoing email. --------------------------------------------------------------
