Jason Esman wrote:

-----Original Message-----
From: Rejaine Monteiro [mailto:[EMAIL PROTECTED]
Sent: Wednesday, September 03, 2008 7:19 AM
To: users@spamassassin.apache.org
Subject: spam bypass spamassassin


Why this spam scored with 5.1 (requered 5.0) bypass spamassassin??

 (clamdscan: 0.93/8144. spamassassin: 3.2.5.
 Clear:RC:0(aaa.bbb.ccc.ddd):SA:1(5.1/5.0):.
 Processed in 2.490743 secs); 03 Sep 2008 11:32:21 -0000
X-Spam-Status: Yes, score=5.1 required=5.0
X-Spam-Level: +++++

I'm also seeing this, it is not that it bypass Spamassassin but that it is not 
adding the Subject. I've lately been getting a lot of spam that score 5.1 the 
spam threshold is 5.0 but at 5.1 it does not change the subject.

An example:

Subject: Aaca aaiiuo
Date: Mon, 1 Sep 2008 06:18:26 -0500
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_0018_01C90D17.8D566C70"
X-Mailer: Microsoft Office Outlook 11
Thread-Index: AckMJHQQXzDI+JlySi+ENdpaQUGHHQAAAAM+
content-class: urn:content-classes:dsn
x-originalarrivaltime: 01 Sep 2008 11:18:25.0639 (UTC) 
FILETIME=[73B55770:01C90C24]
x-spam-level: +++++
x-spam-status: Yes, score=5.1 required=5.0
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
x-dsncontext: 7ce717b1 - 1391 - 00000002 - C00402D1

This is a multi-part message in MIME format.


Notice the subject does not say *****SPAM***** which is what we have rewrite 
subject set to.



How do you call SA? if you call SA from a program that adds its own header (notice the case in the x-spam-* headers. here, they are X-Spam-...), then the same program is probably responsible for changing the subject. in which case, this is not an SA issue.

Reply via email to