Greetings,
I am trying to trackdown why some spam is scoring the way it is. Take a
look at the sample header at the end of the e-mail.
Using spamd and exim I will get a score of 2.6, but in if I call
spamassassin from the command line I get a score of 8.1.
via exim/spamd
X-Spam-Checker-Version: SpamAssassin 3.2.1 (2007-05-02) on
bronze.cs.yorku.ca
X-Spam-Level: **
X-Spam-Status: No, score=2.6 required=2.7 tests=DATE_IN_PAST_03_06,
DRUGS_ERECTILE,RCVD_IN_PBL,RDNS_NONE,STOX_REPLY_TYPE autolearn=disabled
version=3.2.1
via commandline
spamassassin -t < spam1.mbs
Content analysis details: (8.1 points, 2.7 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.0 STOX_REPLY_TYPE STOX_REPLY_TYPE
0.1 RDNS_NONE Delivered to trusted network by a host with no
rDNS
1.5 FH_RELAY_NODNS We could not determine your Reverse DNS
0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[84.222.168.64 listed in zen.spamhaus.org]
4.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
1.4 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date
0.6 DRUGS_ERECTILE Refers to an erectile drug
This is not the first time, this has happened. I have four spam e-mails
that I have spam that are scored 1.8 via spamd and exim, but on the
commandline spamassassin -t < spam-email I get a score of 23.
Any tips or pointers ?
---------------------------
From: "Adan Chambers" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Order Viagra N0_PRES needed with fast shipping!
Date: Mon, 16 Jul 2007 11:44:54 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="windows-1250"
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2869
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
------
This scored 23.1 via the commandline.
X-Spam-Level: *
X-Spam-Status: No, score=1.8 required=2.7 tests=RCVD_IN_PBL,
RCVD_IN_WHOIS_INVALID,RDNS_NONE autolearn=disabled version=3.2.1
Received: from [220.129.142.109] (helo=xipzgtwr)
by bronze.cs.yorku.ca with smtp (Exim 4.67)
(envelope-from <[EMAIL PROTECTED]>)
id 1IAbAu-00014W-6d; Mon, 16 Jul 2007 20:44:25 -0400
To: <[EMAIL PROTECTED]>
From: "Jeannette Larita" <[EMAIL PROTECTED]>
Subject: Men's Sexual Health Pill from $1.50 per pill, Pain Relief,
Anti-Anxiety/Sleep fzun
Message-ID: <[EMAIL PROTECTED]>
