Hi!

NoSpamProxy is a smtp-proxy which "gives" the email-source to SA which returns 
the score. That score is added to other scores NoSpamProxy computes.
We run this setup since years without any negative impacts...only that mails i 
wrote about before - pass through without being scored.

SA-Report when passing them directly to SA can be found here: 
http://www.ghds.de/spam/sa-report.txt



Ove



-----Ursprüngliche Nachricht-----
Von: John Hardin [mailto:jhar...@impsec.org] 
Gesendet: Sonntag, 23. Januar 2011 18:26
An: users@spamassassin.apache.org
Betreff: Re: how to get this type of spam scored?

On Sun, 23 Jan 2011, Starckjohann, Ove wrote:

> Hi!
>
> During the last days we got many of these spammails.
>
> http://www.ghds.de/spam/spam1_eml.txt
> http://www.ghds.de/spam/spam2_eml.txt
> http://www.ghds.de/spam/spam3_eml.txt
>
> Training them to bayes doesn't show any effect...they still don't get
> scored :-(
>
> Any help appreciated!

We'll need more information before being able to suggest anything...

(1) Are those samples complete? Two only have one Received: header, which 
suggests they were retrieved from a mail client rather than raw from the 
message store.

(2) Are those samples from before or after you scanned them with SA? The 
second one does appear to have a SA header indicating it scored as spam, 
the other two have no clear indication that they were scanned by SA at all 
(but see the next question).

(3) What is your glue layer? "NoSpamProxy"? It's possible that the 
problems are related to that rather than SpamAssassin. You should 
_probably_ go to their support desk first, because we probably won't be 
able to help you fix whatever they are doing outside of SA.

(4) If you pass those messages through "spamassassin -t" what results do 
you get? Are they scored as spam? Do they hit high bayes confidence 
levels?

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   A superior gunman is one who uses his superior judgment to keep
   himself out of situations that would require the use of his
   superior skills.
-----------------------------------------------------------------------
  Today: John Moses Browning's 156th Birthday

Reply via email to