Hi,
I just got a spam message in my inbox without being flagged by SA, and I
find it very curios because it was a clear spam message. Wen I examine
the headers to see the score assigned by SA I get more surprised
____
Content analysis details: (0.4 points, 5.0 required)
____
pts rule name description
---- ----------------------
--------------------------------------------------
0.2 HTML_MESSAGE BODY: HTML included in message
0.2 HTML_FONT_BIG BODY: HTML tag for a big font size
WTF?
I copy the message a feed SA with it
X-Spam-Status: No, score=2.4 required=5.0 tests=BAYES_99,HTML_80_90,
HTML_FONT_BIG,HTML_IMAGE_RATIO_08,HTML_MESSAGE,MIME_QP_LONG_LINE
autolearn=no version=3.0.2
OK, here it hit the rules that it was supposed to hit. But is still
getting a low score.
What can be causing this different scores??
I thought that maybe the running user name was the problem...
So I run SA before as root, now I su to the user name which receive the
mail the first time and guess what...
X-Spam-Status: No, score=0.4 required=5.0 tests=HTML_FONT_BIG,HTML_MESSAGE
autolearn=no version=3.0.2
WTH?
I run it with another user and I get different results
X-Spam-Status: No, score=1.8 required=5.0 tests=DCC_CHECK,HTML_FONT_BIG,
HTML_MESSAGE autolearn=no version=3.0.2
What is going on here? Why the matching rules are different for each
user? Any ideas?
BR,
Matías.
