Hello,
I am relatively new to SpamAssassin and have some problems with email which
seems to get completely different scores when I check them manually than
when the automatic check upon reception by the Exim mail server is
performed.
Before we use an own spam filter the mail was put into an imap folder for an
external mail service to be read (GMX), filtered and forwarded back to
another mail box. That system is still working for parts. When a mail is
transferred like this I can see the spam score being evaluated twice. For
example there was a mail containing only a link to dagwizhua -dot- com,
which is a bad address. It received 6.8 on first run, 3.6 on the second run
only for a few additional headers added by the external mail service.
However, when I copied the mail into a text file and used spamc to send it
the /same/ spamd process I got this result:
[EMAIL PROTECTED]:~$ LANG=C spamc -lR < spam-mail.txt | recode latin1..utf8
12.9/5.0
Software zur Erkennung von "Spam" auf dem Rechner
(...)
Inhaltsanalyse im Detail: (12.9 Punkte, 5.0 benötigt)
Pkte Regelname Beschreibung
---- ----------------------
--------------------------------------------------
0.6 NO_REAL_NAME Kein vollständiger Name in Absendeadresse
1.8 INVALID_DATE Datumskopfzeile nicht standardkonform zu RFC
2822
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
lines
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Transportiert via Rechner in Liste von
www.spamcop.net
[Blocked - see
<http://www.spamcop.net/bl.shtml?203.145.146.3>]
3.3 URIBL_AB_SURBL Enthält URL in AB-Liste (www.surbl.org)
[URIs: dagwizhua -dot- com]
2.6 URIBL_OB_SURBL Enthält URL in OB-Liste (www.surbl.org)
[URIs: dagwizhua -dot- com]
3.6 URIBL_SC_SURBL Enthält URL in SC-Liste (www.surbl.org)
[URIs: dagwizhua -dot- com]
-0.2 AWL AWL: From: address is in the auto white-list
How can the results be so very different on the same spam process? Why would
a few additional headers make a difference if the Bayes does not seem to add
anything to the mail and there is no particular rule for those headers? And
why does a manual scan produce a completely different result if the service
that creates the actual results is the same process?
Thanks for advice
Björn
--
View this message in context:
http://www.nabble.com/Newbie-Questions%3A-Different-Results-for-the-same-message-tp20809927p20809927.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
