new mailscanner server and high scores.

[David Curtis]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Other than adding a subject line of test to the others the e-mails where the same. Same domain name used same sender and same receiver. 

Thanks,
David Curtis
dcurtis at sbschools.net
(802) 652-7254
South Burlington School District
550 Dorset Street
South Burlington, Vt 05403
>>> maillists at CONACTIVE.COM 02/21/05 6:31 PM >>>
David Curtis wrote on         Mon, 21 Feb 2005 16:43:25 -0500:

> The score has gone down but I still don't understand why it is getting 
> scored so high and why is the score changing. 

There's not much mystery here. You didn't scan real mail but some data you 
dropped in via SMTP and which slightly differed each time. You apparently 
used different sender addresses and didn't add some headers, so that makes 
the outcome below. You can verify for each hit if it was correct by 
looking at the rule descriptions in /usr/share/spamassassin.

>  
> From 1st e-mail: 
> score=4.889, required 4.37, DNS_FROM_RFC_ABUSE 0.37, DNS_FROM_RFC_POST 
> 1.38, MISSING_SUBJECT 1.57, NO_REAL_NAME 0.18, UNDISC_RECIPS 1.39) 
>  
> From 2nd e-mail: 
> score=3.229, required 4.37, AWL 1.66, NO_REAL_NAME 0.18, UNDISC_RECIPS 
> 1.39) 
>  
> From 3rd e-mail: 
> SpamAssassin (score=1.569, required 4.37, NO_REAL_NAME 0.18, 
> UNDISC_RECIPS 1.39)
>


Kai

-- 
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
IE-Center: http://ie5.de & http://msie.winware.org

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!







This email may contain information protected under the Family
Educational Rights and Privacy Act (FERPA) or the Health Insurance
Portability and Accountability Act (HIPAA).  If this email contains
confidential and/or privileged health or student information and you
are not entitled to access such information under FERPA or HIPAA,
federal regulations require that you destroy this email without
reviewing it and you may not forward it to anyone.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!