-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We're running SA 3.1.7 with most of the SARE rulesets, including 70_sare_stocks. We're using DCC, Pyzor and Razor. The 'X-SA-Exim-*' headers are from the source, not us.
Any suggestions as to other tests/checks that could be done to bump the scores up over the 5.0 threshold? If your run this message through your SA setup, does it score above 5? Thanks, David Goldsmith ========== Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] X-Spam-DCC: sonic.net: iceman14.giac.net 1117; Body=many Fuz1=many Fuz2=many X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on iceman14.giac.net X-Spam-Level: **** X-Spam-Status: No, score=4.3 required=5.0 tests=BAYES_50,DCC_CHECK, FORGED_RCVD_HELO,RCVD_ILLEGAL_IP,SARE_OBFU_PRICE2 autolearn=no version=3.1.7 X-Spam-Pyzor: Reported 0 times. X-Spam-Report: * 0.1 FORGED_RCVD_HELO Received: contains a forged HELO * 0.3 RCVD_ILLEGAL_IP Received: contains illegal IP address * 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% * [score: 0.4787] * 2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/) * 1.7 SARE_OBFU_PRICE2 found apparent obfuscation of word used in spam Delivered-To: [EMAIL PROTECTED] Received: (qmail 24073 invoked from network); 21 Feb 2007 22:35:09 -0000 Received: from unknown (HELO mgr2.xmission.com) (198.60.22.202) by iceman12-ext.giac.net with SMTP; 21 Feb 2007 22:35:09 -0000 Received: from mgr1.xmission.com ([198.60.22.201]) by mgr2.xmission.com with esmtp (Exim 4.50) id 1HK03I-0003PV-3Z; Wed, 21 Feb 2007 15:35:08 -0700 Received: from slc487.modem.xmission.com ([166.70.2.233] helo=INBOUND.451DEGREES.COM.NETSOLMAIL.NET) by mgr1.xmission.com with esmtp (Exim 4.50) id 1HK03A-0004eO-5l; Wed, 21 Feb 2007 15:35:07 -0700 Received: from snf.45mph.com ([245.249.77.187]) by pkff.45mph.com (Sun Java System Messaging Server 6.1 HotFix 0.04 (built Aug 28 2004)) with ESMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED]; Wed, 21 Feb 2007 14:03:31 -0800 (IST) Date: Wed, 21 Feb 2007 14:24:25 -0800 From: "Cora Nichols" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Message-ID: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Received-SPF: none (mgr1.xmission.com: 166.70.2.233 is neither permitted nor denied by domain of 45mph.com) client-ip=166.70.2.233; [EMAIL PROTECTED]; helo=INBOUND.451DEGREES.COM.NETSOLMAIL.NET; Subject: of straw X-SA-Exim-Connect-IP: 166.70.2.233 X-SA-Exim-Mail-From: [EMAIL PROTECTED] X-SA-Exim-Version: 4.2 (built Thu, 03 Mar 2005 10:44:12 +0100) X-SA-Exim-Scanned: Yes (on mgr1.xmission.com) Major Acquisition kicks off Irwin Resources' move to $2.50!!! Yes, you heard it here first. This acquisition news has been pushing up IWRS and this is Just the Beginning! Company: IWRS Current Prrice: Around $1.00 Tarrget Prrice: $2.50 Check your favorite financial news source for details! More High Impact Announcements to follow! You know us. You know that when we catch wind of a winner it moves! Get in Early and Ride it to $2.50 Office were charged Tuesday with aggravated manslaughter in the death of a 14-year-old at a Florida boot camp for juvenile offenders State Attorney Mark Ober said seven former guards and a nurse are accused of causing the death of Martin Anderson by culpable negligence If convicted each could face up to 30 years in prison ========== -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3rc2 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFF3NdB417vU8/9QfkRArrWAJ9YG+k08C9lFXzI5DPwfrOPqbGAlgCgjtQA Z64CWimxvNXtaOjfCBFvMXk= =yV+2 -----END PGP SIGNATURE-----