Hi, I have an example of spam that I just can't reliably detect:
http://pastebin.com/YuuLuA1x It's basically some HTML with a URL to an ad for "Lantern with 9 LED bulbs". I've trained hundreds of these, and they still report BAYES_50. I've just tested it now, a few hours after having first received it, and it's already being flagged by several URIBLs and is hitting BAYES_99 since I've now trained it. I was just wondering if there was something else that could be triggered on in the header to catch these sooner? I'm assuming the sending IP part of a botnet? I'm using v3.3.2 on fc15 with amavisd. Thanks, Alex
