On 18.07.07 14:41, Robert Fitzpatrick wrote:
> I'm sure it did tremendously, thanks again. But WOW! Look at this one
> where the logs indicate it was scored at 4.441 as I received the
> message, but if I login as the vscan user, I get a score of 5.8...
> 
> Content analysis details:   (5.8 points, 5.0 required)
> 
>  pts rule name              description
> ---- ---------------------- --------------------------------------------------
>  0.6 GMD_PDF_ENCRYPTED      BODY: Attached PDF is encrypted
>  1.4 DCC_CHECK              Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
>  1.3 MISSING_SUBJECT        Missing Subject: header
>  1.5 EMPTY_MESSAGE          Message appears to have no textual parts and no
>                             Subject: text
>  1.0 TVD_PDF_FINGER01       Mail matches standard pdf spam fingerprint

The difference is ~1.4, which is probably because the message matches DCC
check now. It happens very often that between more checks the message will
get to such network "lists" as IP/domain blacklists, URIBL's, razor, pyzor,
dcc and posibly some others.

-- 
Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
2B|!2B, that's a question!

Reply via email to