On Tuesday 16 January 2007 8:29 pm, Theo Van Dinter wrote: > On Tue, Jan 16, 2007 at 07:14:05PM -0600, Chris wrote: > > I just got this in my inbox. If clamav scores 10, how can this be marked > > as not spam? > > > > X-Spam-Status: No, score=4.5 required=5.0 tests=BAYES_05,CLAMAV, > > HTML_IMAGE_ONLY_16,HTML_MESSAGE,MIME_HTML_ONLY,REPLY_TO_EMPTY > > autolearn=disabled version=3.1.7 > > My guess is that CLAMAV doesn't score 10. Doing a quick calculation, it > seems to score ~4.5. Odd, because if I run it through sa-learn --spam, spamassassin -r and spamassasin -t it comes out as:
Content analysis details: (19.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.6 REPLY_TO_EMPTY Reply-To: is empty
0.0 HTML_MESSAGE BODY: HTML included in message
5.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.5 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words
2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
10 CLAMAV Clam AntiVirus detected a virus
1.0 SAGREY Adds 1.0 to spam from first-time senders
Guess its just another mystery of life as to why it didn't get the 10points
the first time for the clamav hit.
--
Chris
KeyID 0xE372A7DA98E6705C
http://learn.to/quote
pgp4WeCifojxp.pgp
Description: PGP signature
