Hi gang:
I am getting a bunch of messages that are passing through my SA setup with the
following scores:
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 SUBJ_FOR_ONLY Subject contains "For Only"
-3.3 ALL_TRUSTED Did not pass through any untrusted hosts
0.0 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
0.0 HTML_90_100 BODY: Message is 90% to 100% HTML
0.5 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
4.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 SARE_UNSUB38D RAW: SARE_UNSUB38D
As you can see, Bayes knows they are spam but the "ALL_TRUSTED" rule is
discounting enough to counter. What's the best way to nail these bastards?
Thanks,
Clay
