> This one is missing the 'From:', 'Date:', 'Subject:', 'Message-Id:',
> and even the message body; ... and has a forged HELO ...
>
> How could something that badly formatted get a SPAMassassin
> score as low as 3.1? ... well below my threshold of 4.7.
Simple - SA scores based on what it finds in the message, not what it
doesn't find, for the most part. In this case there is nothing to find, so
there isn't much score.
This is a typical result of a clueless spammer that can't set up their
spamware correctly. SARE has at least one rule that is pretty good at
catching these messages. You might want to investigate some of the add-on
rulesets that can be found at rulesemporium.com and exit0.us.
Loren
