Kaleb Hosie wrote: > I've just finished updating my production server to SpamAssassin 3.3.0 and I > immediately ran sa-update to get the latest rule set for SpamAssassin. Is > there a way to tell whether sa-update downloaded the latest definitions > correctly? > > A user has just emailed me with some SPAM that was sent about an hour after I > upgraded. I looked at the message and it was a "Casino promotional offer"; > I've posted the spam headers below: > > X-Spam-Status: No, score=2.2 required=5.0 tests=BAYES_00,HTML_IMAGE_ONLY_28, > HTML_MESSAGE,RCVD_IN_BRBL_LASTEXT,T_RP_MATCHES_RCVD,URIBL_JP_SURBL > autolearn=no version=3.3.0 > > The only configuration I've changed since the install was the "report_safe" > and "trusted_networks" option. Is there something else I need to configure to > fine tune SA? >
The main problem is the BAYES_00 rule. Apparently, your bayes db thinks this email is definitely not spam. Are you sure it is being trained properly? Without any bayes hit, this would have scored 4.8. If you can get bayes to score it as spam, you'll have it. -- Bowie
