LuKreme wrote:
[...] Here's your post's X-Spam-Status header:
X-Spam-Status: No, hits=-1.7 required=5.0 tests=AWL,BAYES_00, FROM_ENDS_IN_NUMS,J_CHICKENPOX_44 autolearn=no version=2.63
Well, it's not showing 'none' at least, so that's encouraging. And it is hitting the addon rule sets.
For what it's worth I have Chickenpox, backhair, and a fairly recent bigevil installed
Hmm... and --lint shows nothing?
[...]
AFAIK I have made no changes at all to the default levels for anything. Other then the three above .cf files my local.cf consists only of
rewrite_subject 1 subject_tag (Spam? _HITS_)
I'd be worried about the auto-learning going on with bad scoring. The default autolearn threshold for ham is .1 IIRC, and you're getting a LOT of stuff scoring below that for some reason.
Here's what it hit here:
Content analysis details: (9.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 FROM_ENDS_IN_NUMS From: ends in numbers
0.6 J_CHICKENPOX_22 BODY: {2}Letter - punctuation - {2}Letter
0.1 TW_CD BODY: Odd Letter Triples with CD
0.1 TW_MJ BODY: Odd Letter Triples with MJ
5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 MIME_HTML_NO_CHARSET RAW: Message text in HTML without charset
-8.0 HABEAS_SWE Has Habeas warrant mark (http://www.habeas.com/)
1.5 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?210.149.124.241>]
1.2 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOCAL_DRUGS_ANXIETY LOCAL_DRUGS_ANXIETY
1.0 LOCAL_SMELLSPAM All non-SpamAssassin bayes says SPAM
0.0 LOCAL_DRUGS_SLEEP LOCAL_DRUGS_SLEEP
0.0 LOCAL_DRUGS_DEPRESSION LOCAL_DRUGS_DEPRESSION
0.0 LOCAL_DRUGS_PAIN LOCAL_DRUGS_PAIN
0.5 LOCAL_DRUGS_MALEDYSFUNCTION_OBFU LOCAL_DRUGS_MALEDYSFUNCTION_OBFU
1.0 LOCAL_DRUGS_MALEDYSFUNCTION LOCAL_DRUGS_MALEDYSFUNCTION
0.0 LOCAL_DRUGS_MUSCLE LOCAL_DRUGS_MUSCLE
1.0 LOCAL_DRUGS_PAIN_MALEDYS LOCAL_DRUGS_PAIN_MALEDYS
1.0 LOCAL_DRUGS_ANXIETY_MALEDYS LOCAL_DRUGS_ANXIETY_MALEDYS
1.0 LOCAL_DRUGS_DEPRESSION_MALEDYS LOCAL_DRUGS_DEPRESSION_MALEDYS
1.0 LOCAL_DRUGS_MANYKINDS LOCAL_DRUGS_MANYKINDSNote that it IS pretty low scoring, all things considered. It's got the forged habeas headers, but despite that is still very spammish. Most pattern rule hits came from Matt Kettler's anti-drug.cf. Bayes has no problem with random word stuff (as expected). The LOCAL_SMELLSPAM rule is one I wrote that indicates that FOUR separate bayes tools flagged it as spam.
Check your rules to make sure everyting's intact, but if it weren't for bayes and antidrug, this WOULD be a tough one to catch.
- Bob
