patrickbaer wrote:

And this is the output from the very same command, ran on the test box:

The command might be the same, but the message was not. There are important differences in the headers (see below).

Only one of the messages had any "Received:" headers, wich can make a big difference for the score. In this case the rules RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_XBL RBL and RCVD_IN_PBL RBL hit the message with complete headers wich is a score difference of 5.6.

Another difference between the scores is that one of the messages hit more URIBL rules than the other. This couls simply be because some time has passed between your two tests, but it could also be due to DNS problems.


The headers for the first message was:
---8<---
From: "Ayomide Acton" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: The best offer!
Date: Thu, 4 Sep 2008 08:14:46 -0500
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="----=_NextPart_000_0012_01C90E66.4AEF7570"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Status:
---8<---

The headers for the message on the test box was:
---8<---
Return-Path: <[EMAIL PROTECTED]>
Received: from medusa.tvwerk.de ([unix socket])
 by medusa2 (Cyrus v2.2.13-Debian-2.2.13-10.cb1.1) with LMTPA;
 Thu, 04 Sep 2008 15:15:10 +0200
X-Sieve: CMU Sieve 2.2
Received: from proxy.tvwerk.de (proxy1 [10.10.10.2])
 by medusa.tvwerk.de (Postfix) with ESMTP id 2AAD81BD7F22
 for <[EMAIL PROTECTED]>; Thu, 4 Sep 2008 15:15:10 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
 by proxy.tvwerk.de (Postfix) with ESMTP id 208B43040D6
 for <[EMAIL PROTECTED]>; Thu, 4 Sep 2008 15:15:10 +0200 (CEST)
X-Virus-Scanned: amavisd-new at tvwerk.de
X-Spam-Flag: NO
X-Spam-Score: 1.491
X-Spam-Level: *
X-Spam-Status: No, score=1.491 tagged_above=0 required=5
 tests=[BAYES_05=-1.11, HTML_MESSAGE=0.001,
 RAZOR2_CF_RANGE_51_100=0.5,RAZOR2_CF_RANGE_E8_51_100=1.5,
 RAZOR2_CHECK=0.5, RDNS_NONE=0.1]
Received: from proxy.tvwerk.de ([127.0.0.1])
 by localhost (proxy1.tvwerk.de [127.0.0.1])
 (amavisd-new, port 10024)
 with ESMTP id 4N+6qeb1DG4o for <[EMAIL PROTECTED]>;
 Thu, 4 Sep 2008 15:14:54 +0200 (CEST)
Received: from abenalaptop (unknown [190.173.128.77])
 by proxy.tvwerk.de (Postfix) with ESMTP id 7E8E03040CB
 for <[EMAIL PROTECTED]>; Thu, 4 Sep 2008 15:14:50 +0200 (CEST)
From: "Ayomide Acton" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: The best offer!
Date: Thu, 4 Sep 2008 08:14:46 -0500
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="----=_NextPart_000_0012_01C90E66.4AEF7570"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Status:
---8<---

Regards
/Jonas
--
Jonas Eckerman, FSDB & Fruktträdet
http://whatever.frukt.org/
http://www.fsdb.org/
http://www.frukt.org/

Reply via email to