Since I ran sa-update last Sunday I've been getting between 1 and 3 FN's daily. Here's a sample of todays:
X-Spam-Virus: No X-Spam-Seen: Tokens 92 X-Spam-New: Tokens 123 X-Spam-Remote: Host localhost.localdomain X-Spam-Checker-Version: SpamAssassin 3.1.2 (2006-05-25) on cpollock.localdomain X-Spam-Hammy: Tokens 10 X-Spam-Status: No, score=3.6 required=5.0 tests=BAYES_60,DNS_FROM_RFC_ABUSE, MSGID_FROM_MTA_ID autolearn=disabled version=3.1.2 X-Spam-Spammy: Tokens 17 X-Spam-Pyzor: Reported 0 times. X-Spam-Token: Summary Tokens: new, 31; hammy, 10; neutral, 65; spammy, 17. X-Spam-DCC: cpollock 1113; Body=1 Fuz1=1 Fuz2=1 X-Spam-Untrusted: Relays [ ip=201.78.246.234 rdns= helo=1C124EC by=mx-casero.atl.sa.earthlink.net ident= envfrom= intl=0 id=1g6cgY7vl3Nl34m0 auth= ] [ ip=201.78.246.234 rdns= helo= by=UIAVP-QXHTBMD-A4-x.bellauk.com ident= envfrom= intl=0 id= auth= ] X-Spam-Level: *** X-Spam-RBL: Results <dns:fireandice.org?type=MX> [0 fireandice.org.] <dns:fireandice.org> [216.193.217.213] <dns:fireandice.org.fulldom.rfc-ignorant.org> [127.0.0.4] Status: U Return-Path: <[EMAIL PROTECTED]> Received: from pop.earthlink.net [209.86.93.201] by localhost with POP3 (fetchmail-6.2.5) for [EMAIL PROTECTED] (single-drop); Thu, 27 Jul 2006 15:17:06 -0500 (CDT) Received: from 1C124EC ([201.78.246.234]) by mx-casero.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id 1g6cgY7vl3Nl34m0; Thu, 27 Jul 2006 16:15:57 -0400 (EDT) Received: from 201.78.246.234 by UIAVP-QXHTBMD-A4-x.bellauk.com with smtp for <[EMAIL PROTECTED]>; Thu, 27 Jul 2006 13:15:59 -0800 From: "Glen.T" <[EMAIL PROTECTED]> To: "Cpollet" <[EMAIL PROTECTED]> Subject: Works also went into the public domain in most other countries. In the European Union, where a retroactive copyright extension law re-copyrighted 20 years worth of public domain works a couple of years back, works by authors who died in 1927 rejoined the public domain. In most of the rest of the world, works by authors who died in 1947 entered the public domain. Date: Thu, 27 Jul 2006 13:15:59 -0800 Mime-Version: 1.0 Message-Id: <[EMAIL PROTECTED]> X-ELNK-Info: spv=0; X-ELNK-AV: 0 X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000; X-SenderIP: 201.78.246.234 X-ASN: ASN-7738 X-CIDR: 201.78.192.0/18 Content-Type: X-UID: 19458 X-Length: 2519 When spamassassin -t is run against the saved spam however (without running spamassassin -r) the output is completely different: Content preview: You can buy absolutely legal, perfect quality must have medications at lowest prices just in few minutes http://www.geocities.com\///\stanton1094 Terri Colbert John Mark Ockerbloom, Editor John Mark Ockerbloom, Editor [...] Content analysis details: (6.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.4 MSGID_FROM_MTA_ID Message-Id for external message added locally 2.0 BAYES_60 BODY: Bayesian spam probability is 60 to 80% [score: 0.6656] 0.2 DNS_FROM_RFC_ABUSE RBL: Envelope sender in abuse.rfc-ignorant.org 2.6 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org [<http://dsbl.org/listing?201.78.246.234>] 3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [201.78.246.234 listed in sbl-xbl.spamhaus.org] -3.2 AWL AWL: From: address is in the auto white-list Prior to this I haven't gotten a FN for at least 6 months. Any possible reasons why this may be happening now? Running SA 3.1.2 -- Chris 17:29:46 up 17 days, 15:34, 2 users, load average: 0.68, 0.43, 0.23
pgpJ6LDqVOoHZ.pgp
Description: PGP signature
