Heh, yeah, the first one is in SaneSecurity now. I call clamd directly
from Exim before SA, so I wouldn't see this one anymore.

Thanks,
Jake

On Mon, Mar 2, 2009 at 8:40 PM, Chris <cpoll...@embarqmail.com> wrote:
> On Mon, 2009-03-02 at 05:16 +0100, Michelle Konzack wrote:
>> Am 2009-03-01 09:44:00, schrieb Jake Maul:
>> > http://pastebin.com/m58b01a0b
>>
>> Score 7.6
>
> Content analysis details:   (21.4 points, 5.0 required)
>
>  pts rule name              description
> ---- ----------------------
> --------------------------------------------------
>  0.3 TO_HARVESTED           To: obviously harvested
>  0.0 RELAY_UK               Relayed through Brittan
>  1.4 PLING_QUERY            Subject has exclamation mark and question
> mark
>  0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay
> lines
>  3.0 URIBL_BLACK            Contains an URL listed in the URIBL
> blacklist
>                            [URIs: rb.mail.ru]
>  4.1 BAYES_80               BODY: Bayesian spam probability is 80 to 95%
>                            [score: 0.8976]
>  0.0 HTML_MESSAGE           BODY: HTML included in message
>  1.5 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
> -0.0 DCC_CHECK_NEGATIVE     Not listed in DCC
>                            [localhost 1117; Body=1 Fuz1=1]
>  10 CLAMAV                 Clam AntiVirus detected a virus
>  0.1 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
>  1.0 SAGREY                 Adds 1.0 to spam from first-time senders
>
>> > http://pastebin.com/me13959a
>>
>> Score 7.8
>
> Content analysis details:   (10.9 points, 5.0 required)
>
>  pts rule name              description
> ---- ----------------------
> --------------------------------------------------
>  3.0 URIBL_BLACK            Contains an URL listed in the URIBL
> blacklist
>                            [URIs: rb.mail.ru]
>  5.0 BAYES_99               BODY: Bayesian spam probability is 99 to
> 100%
>                            [score: 0.9936]
>  0.3 TO_HARVESTED           To: obviously harvested
>  0.0 RELAY_UK               Relayed through Brittan
>  0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay
> lines
>  0.0 HTML_MESSAGE           BODY: HTML included in message
>  1.5 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
> -0.0 DCC_CHECK_NEGATIVE     Not listed in DCC
>                            [localhost 1117; Body=1 Fuz1=1]
>  0.1 HTML_MIME_NO_HTML_TAG  HTML-only message, but there is no HTML tag
>  1.0 SAGREY                 Adds 1.0 to spam from first-time senders
>
> My rules hit and scores above.
>
> --
> KeyID 0xE372A7DA98E6705C
>
>

Reply via email to