Thomas, That was a mail that made it through. I won't go through my entire process, but I archive every mail that comes in to our system, and when I'm done, I have every e-mail that made it through to the user's desk. I have specific rules set up and was wondering why mail that I knew should have been caught, was making it past. I took one of these mails, the one I sent in my letter to the group, fed it through SA manually, and it confirmed my suspicions. That was the point. Why is it making it past if it is obviously marked as spam?
>>> Thomas Arend <[EMAIL PROTECTED]> 01/13 3:21 PM >>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am Donnerstag, 13. Januar 2005 12:47 schrieb Joe Zitnik: > We've been having a group of the same type of e-mails making it through > spamassassin. These are the e-mails that have the "get a capable html > e-mailer" line in them. I have yet to see any legitimate e-mail with > that line, so I made a custom rule to score 11 points for that slogan. > I have also fed hundreds of different e-mails with that line in to my > bayes database, and yet I'm still seeing a lot of e-mails with that > line making it through, so I fed one of the e-mails through manually and > the relevant output is below. The MY_CAPABLE rule is the custom rule > for these types of e-mail, it is adding the points, but a great many of > these are still making it through. I know I saw other posts where > people were saying spam was making it past or only every other e-mail > was being checked, and I'm wondering why e-mails like these are slipping > past. I used my magic eye to find your rule. No joy. The example you presented seems to be correctly marked as spam. A message which passes your SA would be helpful. Also the rule. Regards Thomas [..] - -- icq:133073900 http://www.t-arend.de -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFB5thmHe2ZLU3NgHsRAou3AJ0Tl3Tu6++Yu7ZVYTqOXql8u8XZ0QCfc382 Cp7/HW2KCopAdauOdDKQfHQ= =AV57 -----END PGP SIGNATURE-----