Mike Pepe wrote:
> Hi folks, I got two spams through today and I'm a little confused as
> to why.
>
> Spam 1:
>
> From [EMAIL PROTECTED]  Sat Apr 22 01:28:34 2006
> Return-Path: <[EMAIL PROTECTED]>
> X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on quadzilla
> X-Spam-Level: **
> X-Spam-Status: No, score=2.0 required=5.0 tests=BAYES_80 autolearn=no
>         version=3.1.1
>
<snip>
> Now, I run it through sa manually, and the report looks like:
>
> Content analysis details:   (10.0 points, 5.0 required)
>
>  pts rule name              description
> ---- ----------------------
> --------------------------------------------------
>  4.0 CATHY_CAPARULA         BODY: Email addressed to Cathy Caparula
>  3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
>                             [score: 1.0000]
>  1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
>              [Blocked - see
> <http://www.spamcop.net/bl.shtml?221.155.184.221>]
>  3.9 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
>                             [221.155.184.221 listed in
> sbl-xbl.spamhaus.org]
> -2.9 AWL                    AWL: From: address is in the auto white-list
>
> The second spam is almost identical to the first.
>
> I guess the question is: why such radically different scores? is the
> auto-scanning not using my custom CATHY_CAPARULA rule?
We need some background on your setup:

How do you call SA to get your mail scanned at delivery time?
Do you use spamd to scan your mail?
If so, did you restart spamd after adding your rule?
Where is your CATHY_CAPARULA rule declared (ie: what file)?

Reply via email to