Hello to all.
I'm wondering why the following isn't hitting more rules:
Return-Path: <[EMAIL PROTECTED]>
Received: from braunconsult.com (216-130-126-2.cimcoisp.net
[216.130.126.2] (may be forged))
by mail1.firstbhph.com (8.12.11.20060308/8.12.11) with SMTP id
k6QG52CZ028664
for <[EMAIL PROTECTED]>; Wed, 26 Jul 2006 12:05:02 -0400
Message-ID: <[EMAIL PROTECTED]>
Reply-To: "Janele Kinyon" <[EMAIL PROTECTED]>
From: "Janele Kinyon" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: {Spam?} Re: qutugVjlAGRA
Date: Wed, 26 Jul 2006 09:01:21 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C6B092.10472690"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Synonym: Copied by Synonym (http://www.modulo.ro/synonym) to:
[EMAIL PROTECTED]
X-First1-MailScanner-Information: Please contact First 1 Financial
Corporation for more information
X-First1-MailScanner: Found to be clean
X-First1-MailScanner-SpamCheck: spam, SBL+XBL, SpamAssassin (not
cached,
score=7.414, required 6, BAYES_99 3.50, HTML_50_60 0.13,
HTML_MESSAGE 0.00, URIBL_SBL 1.64, URIBL_WS_SURBL 2.14)
X-First1-MailScanner-SpamScore: sssssss
X-MailScanner-From: [EMAIL PROTECTED]
Status: R
X-Status: NC
X-KMail-EncryptionState:
X-KMail-SignatureState:
X-KMail-MDN-Sent:
CIjALIlS from 3 , 75 $
VlljAGRA from 3 , 35 $
AMjBlIEN
VAjLIlUM from 1 , 25 $
I'm using the following rules in my setup:
TRIPWIRE
SARE_RANDOM
BOGUSVIRUS
SARE_EVILNUMBERS0
SARE_SPOOF
SARE_BAYES_POISON_NXM
SARE_SPECIFIC
SARE_ADULT
SARE_UNSUB
SARE_URI0
SARE_GENLSUBJ0
SARE_WHITELIST_RCVD
SARE_WHITELIST_SPF
SARE_REDIRECT_POST300
SARE_FRAUD
SARE_HEADER0
SARE_BML
SARE_OEM
SARE_OBFU
along with Bayes, DCC, Razor, and Pyzor.
Forgive my ignorance, but I would think that this would trip more
rules. I seem to be getting an increasing number of obvious spam
which "only" hit bayes, DCC and/or Razor and/or Pyzor, and RBLs (and,
of course, I'm grateful for that!). Few, if any, other rules are
hit. Running "spamassassin -D --lint" shows all of my rules being
read, and throws no errors.
Oh, yeah, this is a CentOS 3.7 box, running
sendmail-8.12.11-4.RHEL3.6, spamassassin-3.0.4-1, clamav-0.88.3, and
mailscanner-4.54.6-1.
Thanks.
Dimitri
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
