Hello, I'm running SA 3.4 and am getting several messages like both of these, headers below, that are getting through. I've run sa-learn on my Spam folder to train Sa, but still they're getting through. There are two separate sets of full headers x-d out to avoid giving server information, but revealing the spam stuff. If anyone has any suggestions on how to tighten this I'd like to know.
Thanks. Dave. headers1: Return-Path: <haveaflingw@work11.suddenaffair.rocks> Delivered-To: xxx Received: from localhost (localhost [127.0.0.1]) by xxx (Postfix) with ESMTP id 82E925E628 for <xxx>; Thu, 22 Jan 2015 00:09:36 -0500 (EST) X-Virus-Scanned: amavisd-new at xxx X-Spam-Flag: NO X-Spam-Score: -0.009 X-Spam-Level: X-Spam-Status: No, score=-0.009 tagged_above=-999 required=1.2 tests=[T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.xxx.com ([127.0.0.1]) by localhost (mail.xxx.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3As4JmZP4I6c for <x...@xxx.com>; Thu, 22 Jan 2015 00:09:35 -0500 (EST) Received-SPF: None (no SPF record) identity=mailfrom; client-ip=104.140.56.120; helo=work11.suddenaffair.rocks; envelope-from=haveaflingw@work11.suddenaffair.rocks; receiver=x...@xxx.com Received: from work11.suddenaffair.rocks (work11.suddenaffair.rocks [104.140.56.120]) by mail.xxx.com (Postfix) with ESMTP id 509715E252 for <x...@xxx.com>; Thu, 22 Jan 2015 00:09:33 -0500 (EST) Date: Wed, 21 Jan 2015 22:10:43 -0700 Mime-Version: 1.0 From: Have a Fling <haveaflingw@work11.suddenaffair.rocks> To: Recipient <x...@xxx.com> Mod-Ishly: 1354871717862081 Content-Type: text/plain Subject: Re: Fulfill Your Fantasy - Have a Fling. Trial Membership expires 1-22-15. Under-Lid: 12d433f06e13926c4b3b350868dcfbd9 Egg-Plant: 1354871712d433f06e13926c4b3b350868dcfbd9 Message-ID: <17862081.13548717.12d433f06e13926c4b3b350868dcfbd9@work11.suddenaffair.rocks> Flags: \Seen headers2: Return-Path: <oprahsnewbody@work05.netlowerhome.rocks> Delivered-To: x...@xxx.com Received: from localhost (localhost [127.0.0.1]) by mail.xxx.com (Postfix) with ESMTP id 9819F5E628 for <x...@xxx.com>; Wed, 21 Jan 2015 23:06:27 -0500 (EST) X-Virus-Scanned: amavisd-new at xxx.com X-Spam-Flag: NO X-Spam-Score: 0.826 X-Spam-Level: X-Spam-Status: No, score=0.826 tagged_above=-999 required=1.2 tests=[HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.1, MPART_ALT_DIFF=0.724, T_REMOTE_IMAGE=0.01, T_RP_MATCHES_RCVD=-0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.xxx.com ([127.0.0.1]) by localhost (mail.xxx.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eYTmSlXSebkA for <x...@xxx.com>; Wed, 21 Jan 2015 23:06:26 -0500 (EST) Received-SPF: None (no SPF record) identity=mailfrom; client-ip=104.140.56.114; helo=work05.netlowerhome.rocks; envelope-from=oprahsnewbody@work05.netlowerhome.rocks; receiver=x...@xxx.com Received: from work05.netlowerhome.rocks (work05.netlowerhome.rocks [104.140.56.114]) by mail.xxx.com (Postfix) with ESMTP id 435CC5E252 for <x...@xxx.com>; Wed, 21 Jan 2015 23:05:56 -0500 (EST) Date: Wed, 21 Jan 2015 21:09:34 -0700 Subject: Re: Oprah is down 4-dress-sizes - You can be too. Ceru-Lean: 2047072610080931 From: Oprah's-New-Body <oprahsnewbody@work05.netlowerhome.rocks> Mime-Version: 1.0 Message-ID: <10080931.12d433f06e13926c4b3b350868dcfbd9.20470726@work05.netlowerhome.rocks> Mis-Usage: 12d433f06e13926c4b3b350868dcfbd910080931 Polo-Nize: 12d433f06e13926c4b3b350868dcfbd9 To: <x...@xxx.com> Content-Type: multipart/alternative; boundary="10080931" Flags: \Seen