Brian S. Meehan wrote:
Jim,
I have it set so that i'm using /usr/bin/spamassassin now. Thanks for that
info.

Here is the relevant message header from an email that was not caught:
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on
     mail.meehanontheweb.com
X-Spam-Level: ***
X-Spam-Status: No, score=3.1 required=4.0 tests=ADVANCE_FEE_1,RCVD_IN_XBL
     autolearn=no version=3.1.7
Received: from cliente-addc099 (201-68-96-184.dsl.telesp.net.br
[::ffff:201.68.96.184])
     by meehanontheweb.com with esmtp; Tue, 07 Nov 2006 10:50:57 -0500
     id 00072EA2.4550AB7D.000018B6
Old-Return-Path: <[EMAIL PROTECTED]>
Received: from 192.94.94.37 (HELO red.ext.ti.com)
     by meehanontheweb.com with esmtp (CSNG1VAZG A627H)
     id 6W926D-JODX0S-DO
     for [EMAIL PROTECTED]; Tue, 7 Nov 2006 15:49:51 +0180
From: "Dillon Barron" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Dillon here :)


Here is another one that wasn't caught:
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on
     mail.meehanontheweb.com
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=4.0 tests=EXTRA_MPART_TYPE,
     HTML_IMAGE_ONLY_24,HTML_MESSAGE autolearn=no version=3.1.7
Received: from catv-50634822.catv.broadband.hu
(catv-50634822.catv.broadband.hu [::ffff:80.99.72.34])
     by meehanontheweb.com with esmtp; Mon, 06 Nov 2006 17:04:29 -0500
     id 00086441.454FB16F.000031DE
Message-ID: <[EMAIL PROTECTED]>
From: "Project:" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: rejected Uganda rebel

Thanks,
-Brian




Whats strange is there are no bayes scores at all. I know you mentioned that you have at least 200 ham/spam in the database but are you sure its the same users database that mail processing runs as? Also, when i just ran those headers through spamc here, i got:

 4.1 MSGID_OUTLOOK_INVALID  Message-Id is fake (in Outlook Express format)


Im curious as to why your system didnt trigger this rule? Im still running 2.64 ;(

It does seem that you are using network tests, but are you using razor/pyzor/dcc? Those could help as well.

-Jim

Reply via email to