I am using spamassassin v 3.2.5 invoked via spamc from Postfix v2.3.3.
 My local.conf file is pretty basic.  The only change is to shut off
the FH_DATE_PAST_20XX rules which triggers for every message from Jan
1, 2010 on

  required_hits 5
  report_safe 0
  rewrite_header Subject [SPAM]
  skip_rbl_checks 0
  score FH_DATE_PAST_20XX 0

I've been seeing several emails lately that are being scored low that,
from what I know of the SA rules should be scored higher.  A recent
example was a typical spam message:

--- Begin ---
March 10, 2010
12:59:09

---> Enter shop here [URL deleted because it causes my message to be rejected]

<bunch of random sentence frasgments deleted>
--- End ---

The original incoming message arrived in my inbox with the following score:

x-spam-status: No, score=2.1 required=5.0
tests=BAYES_50,RDNS_NONE,URIBL_BLACK   autolearn=no version=3.2.5
x-spam-checker-version: SpamAssassin 3.2.5 (2008-06-10) on cadmzmx01.lereta.com
x-spam-level: **

Out of curiosity I copied the original message body and sent it to
myself from a test address.  The headers this time looked like:

x-spam-status: No, score=4.4 required=5.0 tests=AWL,BAYES_00,
FROM_STARTS_WITH_NUMS,RCVD_IN_DNSWL_LOW,URIBL_AB_SURBL,URIBL_JP_SURBL,
URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL autolearn=no
version=3.2.5
x-spam-checker-version: SpamAssassin 3.2.5 (2008-06-10) on cadmzmx01.lereta.com
x-spam-level: ****

The second message invoked a larger number of body check rules than
the first but I don't understand why.  Is that normal or do I have
something configured incorrectly?

(I tried sending the complete headers but that message was bounced as spam!)

-- 
Stephen Carville

Reply via email to