Heh, yeah, the first one is in SaneSecurity now. I call clamd directly from Exim before SA, so I wouldn't see this one anymore.
Thanks, Jake On Mon, Mar 2, 2009 at 8:40 PM, Chris <cpoll...@embarqmail.com> wrote: > On Mon, 2009-03-02 at 05:16 +0100, Michelle Konzack wrote: >> Am 2009-03-01 09:44:00, schrieb Jake Maul: >> > http://pastebin.com/m58b01a0b >> >> Score 7.6 > > Content analysis details: (21.4 points, 5.0 required) > > pts rule name description > ---- ---------------------- > -------------------------------------------------- > 0.3 TO_HARVESTED To: obviously harvested > 0.0 RELAY_UK Relayed through Brittan > 1.4 PLING_QUERY Subject has exclamation mark and question > mark > 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay > lines > 3.0 URIBL_BLACK Contains an URL listed in the URIBL > blacklist > [URIs: rb.mail.ru] > 4.1 BAYES_80 BODY: Bayesian spam probability is 80 to 95% > [score: 0.8976] > 0.0 HTML_MESSAGE BODY: HTML included in message > 1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts > -0.0 DCC_CHECK_NEGATIVE Not listed in DCC > [localhost 1117; Body=1 Fuz1=1] > 10 CLAMAV Clam AntiVirus detected a virus > 0.1 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag > 1.0 SAGREY Adds 1.0 to spam from first-time senders > >> > http://pastebin.com/me13959a >> >> Score 7.8 > > Content analysis details: (10.9 points, 5.0 required) > > pts rule name description > ---- ---------------------- > -------------------------------------------------- > 3.0 URIBL_BLACK Contains an URL listed in the URIBL > blacklist > [URIs: rb.mail.ru] > 5.0 BAYES_99 BODY: Bayesian spam probability is 99 to > 100% > [score: 0.9936] > 0.3 TO_HARVESTED To: obviously harvested > 0.0 RELAY_UK Relayed through Brittan > 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay > lines > 0.0 HTML_MESSAGE BODY: HTML included in message > 1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts > -0.0 DCC_CHECK_NEGATIVE Not listed in DCC > [localhost 1117; Body=1 Fuz1=1] > 0.1 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag > 1.0 SAGREY Adds 1.0 to spam from first-time senders > > My rules hit and scores above. > > -- > KeyID 0xE372A7DA98E6705C > >