I have these messages in a paste: http://pastebin.com/jNQfRerx <http://pastebin.com/jNQfRerx>. They were received about 1 1/2 hours apart. After I received the first one, I ran sudo sa-learn —spam /path/to/mail/folder against it and then sudo sa-learn —sync. spamassasin reported that it ‘learned tokens from 1 message…’ I received the second message, but it was not marked as spam, even though, at least as far as I can see, the messages are identical. All the way down to the low contrast ‘hidden’ text. I’m seeing a lot of this lately, although sometimes, the messages come from different domains (reverse lookups are always ok). My server is Ubuntu linux 14.04. What can I do to improve the detection rate?
I’m running sa 3.4.0 which is invoked via postfix in master.cf: smtp inet n - - - - smtpd -vvv -o content_filter=spamassassin sa-update is run via a cron job daily and it last ran early this morning, so its rules should be up to date. So, any ideas? Thanks
