Hello All,
I've upgraded to:
amavisd-new-2.4.4-4
spamassassin-3.1.7-3
from:
amavisd-new-20030616p9-3.6
spamassassin-2.64-3.7
These are optional scores in my local.cf:
## Optional Score
score ROUND_THE_WORLD 0
score SUBJ_ILLEGAL_CHARS 0
score HEAD_ILLEGAL_CHARS 0
score FORGED_HOTMAIL_RCVD2 0
score FORGED_YAHOO_RCVD 0
score SUBJ_ALL_CAPS 0
score MISSING_SUBJECT 0
score DNS_FROM_RFC_POST 0
score DNS_FROM_RFC_ABUSE 0
The problem is that it seems that I still get scorings for the above rules :(
DNS_FROM_RFC_ABUSE=0.2
See below example of such spam e-mail:
---------------------------------------
Return-Path: <[EMAIL PROTECTED]>
Received: from mydomain.ac.il ([unix socket])
by mydomain.ac.il (Cyrus v2.2.3) with LMTP; Sun, 26 Nov 2006 15:43:32
+0200
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost [127.0.0.1])
by mydomain.ac.il (Postfix) with ESMTP id 739CF12886D
for <[EMAIL PROTECTED]>; Sun, 26 Nov 2006 15:43:32 +0200 (IST)
X-Envelope-From: <[EMAIL PROTECTED]>
X-Envelope-To: <[EMAIL PROTECTED]>
X-Quarantine-ID: <a6-A-NiMWaoS>
X-Amavis-Alert: BAD HEADER Non-encoded 8-bit data (char 88 hex): Subject:
\2101000 FREE in We...
X-Spam-Flag: YES
X-Spam-Score: 44.281
X-Spam-Level: ********************************************
X-Spam-Status: Yes, score=44.281 tag=-999 tag2=5 kill=5 tests=[BAYES_99=3.5,
DATE_IN_PAST_96_XX=2.02, DNS_FROM_RFC_ABUSE=0.2,
DNS_FROM_RFC_WHOIS=1.447, FROM_LOCAL_NOVOWEL=2.861,
HELO_DYNAMIC_IPADDR2=3.818, HTML_50_60=0.134, HTML_MESSAGE=0.001,
HTML_TAG_BALANCE_HEAD=1.447, MIME_HTML_ONLY=0.001,
RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5,
RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5,
RCVD_IN_BL_SPAMCOP_NET=1.558, RCVD_IN_NJABL_DUL=1.946,
RCVD_IN_SORBS_DUL=2.046, RCVD_IN_XBL=3.897, URIBL_AB_SURBL=3.812,
URIBL_JP_SURBL=4.087, URIBL_OB_SURBL=3.008, URIBL_SC_SURBL=4.498]
Received: from mydomain.ac.il ([127.0.0.1])
by localhost (mydomain.ac.il [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id a6-A-NiMWaoS for <[EMAIL PROTECTED]>;
Sun, 26 Nov 2006 15:43:29 +0200 (IST)
Received: from 12-215-32-57.client.mchsi.com (12-215-32-57.client.mchsi.com
[12.215.32.57])
by mydomain.ac.il (Postfix) with ESMTP id 3075B1F951
for <[EMAIL PROTECTED]>; Sun, 26 Nov 2006 15:43:23 +0200 (IST)
From: "wont realize" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: X1000 FREE in Welcome Bonuses
Date: Thu, 26 Oct 2006 08:48:39 +0500
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0002_01C6F8DB.88943B60"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: Acb424iUdIWYHggsSheZUsiBH1MRuA==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Message-Id: <[EMAIL PROTECTED]>
Could it be because I'm still using "old stile" amavisd.conf?
Any help?
Best Regards,
Leon Kolchinsky
