Some messages not being spam scanned?

[Stephen Swaney]

By default SpamAssassin actually assigns a -8.0 score to messages containing
the Habeas watermark.

As a result of last weekends spam storm with forged Habeas headers, many of
us have disabled or substantially reduced the SpamAssassin Habeas scoring.

You can reset the Habeas score by adding something like:

score HABEAS_SWE -2.0

to your spam.assassin.prefs.conf where -2.0 is replaced by the value you
want to use.

Hope this helps,

Steve

Stephen Swaney
President
Fortress Systems Ltd.
Steve.Swaney at FSL.com
 

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Andy Moran
> Sent: Wednesday, January 14, 2004 1:23 PM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Some messages not being spam scanned?
> 
> MailScanner seems to correctly scan the vast majority of our messages at
> our company, but we've been getting some which do not have any score as
> if MailScanner decided to skip the SpamAssassin test.    I thought at
> first SpamAssassin was timing out (and perhaps it is?), but I have the
> timeout set to 100 and I don't notice any spamassassin processes stuck
> around.
> 
> Below is the headers of one such message that slipped through.  YOu will
> notice there is no X-WB-MailScanner-SpamCheck like the vast majority of
> our messages have.  One of our users suggested that perhaps MailScanner
> honored those  Habeus headers..  I was almost insulted at the suggestion.
> 
> Is there any way I can figure out why MailScanner isn't giving these a
> spam score?
> 
> 
> Return-Path: <bkSullivan at lodinet.com>
> Received: from cpe-66-91-172-137.hawaii.rr.com
> (cpe-66-91-172-137.hawaii.rr.com [66.91.172.137])
>         by hermes.wildbrain.com (8.12.8/8.12.8) with SMTP id
> i0E65UMh005081
>         for <manager at wildbrain.com>; Tue, 13 Jan 2004 22:05:31 -0800
> Received: from 178.200.121.78 by 66.91.172.137; Tue, 13 Jan 2004
> 13:55:15 -0400
> Message-ID: <AHGHTRUCPCGXTUYXABBXDNVNF at hooger.ch>
> X-Habeas-SWE-1: winter into spring
> X-Habeas-SWE-2: brightly anticipated
> X-Habeas-SWE-3: like Habeas SWE (tm)
> X-Habeas-SWE-4: Copyright 2002 Habeas (tm)
> X-Habeas-SWE-5: Sender Warranted Email (SWE) (tm). The sender of this
> X-Habeas-SWE-6: email in exchange for a license for this Habeas
> X-Habeas-SWE-7: warrant mark warrants that this is a Habeas Compliant
> X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this
> X-Habeas-SWE-9: mark in spam to <http://www.habeas.com/report/>.
> From: "Jocelyn M. Vasquez" <bkSullivan at lodinet.com>
> Reply-To: "Jocelyn M. Vasquez" <bkSullivan at lodinet.com>
> To: manager at wildbrain.com
> Date: Tue, 13 Jan 2004 20:51:15 +0300
> X-Mailer: Direct Mail for Mac OS X
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
>         boundary="--095455287252454"
> X-Priority: 5
> X-WB-MailScanner: Found to be clean
> Subject: LOw Cost X(a)n at x, Valï(u)m, Viagr@, Som@ Di3t Pills Many M3ds
> VOMydclN0U8HR5x
> 
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
> Fortress Systems Ltd.
> www.fsl.com
>