Hi Spams,
Afer finally do clamav scanning with sa-plugin I wonder to know when
this test is done. I mean, if is it the first or last?
Is there any way to force to be the last?
My hearders are these:
Return-Path: <dlu...@okay.com.mx>
X-Original-To: dlu...@okay.com.mx
Delivered-To: dlu...@okay.com.mx
Received: from soekris.okay.com.mx (soekris [192.168.203.18])
by fernanda.okay.com.mx (Postfix) with ESMTP id 96E0A5FDC
for <dlu...@okay.com.mx>; Fri, 2 Jan 2009 12:17:50 -0600 (CST)
Received: by soekris.okay.com.mx (Postfix, from userid 8)
id 472CD730B; Fri, 2 Jan 2009 12:26:46 -0600 (CST)
X-Spam-Virus: No
X-Spam-ImageCerberus-OUT: 0.0 (No images found)
X-Spam-ASN:
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on soekris.okay.com.mx
X-Spam-Level: ***********
X-Spam-Status: Yes, score=11.5 required=3.0 tests=BAYES_99,FH_HELO_EQ_D_D_D_D,
HELO_DYNAMIC_DHCP,HELO_DYNAMIC_IPADDR,HTML_IMAGE_ONLY_16,HTML_MESSAGE,
HTML_SHORT_LINK_IMG_2,L_P0F_W,MIME_HTML_ONLY,RDNS_DYNAMIC,SAGREY
autolearn=no
version=3.2.5
X-Spam-Pyzor: Reported 0 times.
X-Spam-Report:
* 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
* [score: 1.0000]
* 1.4 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
* 0.0 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d
* 2.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP
addr
* 1)
* 0.1 L_P0F_W Relayed through Windows OS except Windows XP
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 1.5 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of
words
* 0.1 RDNS_DYNAMIC Delivered to trusted network by host with
* dynamic-looking rDNS
* 0.0 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image
* 1.0 SAGREY Adds 1.0 to spam from first-time senders
Received: from cpe-76-92-248-31.kc.res.rr.com (cpe-76-92-248-31.kc.res.rr.com
[76.92.248.31])
by soekris.okay.com.mx (Postfix) with ESMTP id 702BB4003
for <dlu...@okay.com.mx>; Fri, 2 Jan 2009 12:26:15 -0600 (CST)
Happy NY
LD
