On Thu, 2005-11-10 at 20:02 -0700, James Lay wrote: > Here's the rule: > > body GATEWAY_001 /tripod\.com/i > score 5 > describe match tripod.com > > Here's the result: > > Nov 9 13:42:03 gateway spamd[17880]: spamd: result: . -2 > -ALL_TRUSTED,AWL,BAYES_00,GATEWAY_001 > scantime=0.6,size=1213,user=spamfilter,uid=1004,required_score=3.4,rhost=localhost,raddr=127.0.0.1,rport=/var/spool/spamfilter/spamd,mid=<[EMAIL > PROTECTED]>,bayes=0,autolearn=ham > > Did I totally miss something? Thanks! > > James
It's probably working as expected. It scored 5 for your rule (presumably), then subtracted something for BAYES_00 and subtracted another amount for ALL_TRUSTED (the amounts depend on if you're using bayes and if network tests are enabled). Also, it would appear the From: address is in the auto whitelist. Did you send a test message from your local machine, perhaps, or is this a score on a real message with all original email headers intact? -Bill