> Chances are that your Bayesian database changed between the > time you recieved this message and the time you rescanned it > from the command line. Rescanning something is _not_ a > reliable way to figure out what score SA gave it on receipt. > You should use the _TESTSSCORES(,)_ macro in your add_header > line to figure that out.
I agree with you! Infact, today I get another spam and after seven hours that it was received I analyse it and I get again a score greater that 5.0 points: Content preview: "Yes, I exactly heard it spoken flight of, self decision but I did not know the scorch "And who man found brain this mark father for you?" plead "Half-past six o'clock has strod cold purpose just struck, M. Bertuccsucceed "The week Count receive shoe of Monte Cristo." [...] Content analysis details: (5.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.1 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry 0.0 HTML_MESSAGE BODY: HTML included in message 3.0 BAYES_95 BODY: Bayesian spam probability is 95 to 99% [score: 0.9680] 0.8 SARE_GIF_ATTACH FULL: Email has a inline gif 0.7 MY_CID_AND_STYLE SARE cid and style But there is a strategy for preventing that this emails reaches the mailboxes before that spamassassin learns about them (maybe greylist?)? thanks, rocsca