Difference between Spam-Scores..

[Marcel Blenkers]

hi there,

on my system a do use spamassassin with mailscanner, but also, after
checking the mails with ms and sa, i do use procmail to check the mails
again with spamassassin.

No i do see some strange behaviour with this.

Some mails do get checked by MailScanner in combination of SpamAssassin,
but the do receive a lower score as using SpamAssassin on itself.

Example:

The Mail-Scanner-Header:

X-irc-addicts.de-MailScanner-Information:       Please contact the ISP for
more information
X-irc-addicts.de-MailScanner:   Found to be clean
X-irc-addicts.de-MailScanner-SpamCheck:         not spam, SpamAssassin
(score=4.595,required 5, RAZOR2_CF_RANGE_51_100 1.49, RAZOR2_CHECK
0.15,RCVD_IN_NJABL_DUL 1.66, RCVD_IN_SORBS_DUL 0.14, URIBL_SBL
0.63,URIBL_WS_SURBL 0.54)
X-irc-addicts.de-MailScanner-SpamScore:         ssss


and now the SpamAssassin-Report after procmail:

Content analysis details:   (6.8 points, 6.0 required)

 pts rule name              description
---- ----------------------
--------------------------------------------------
 0.7 DATE_IN_PAST_12_24     Date: is 12 to 24 hours before Received: date
 0.0 BAYES_50               BODY: Bayesian spam probability is 40 to 60%
                            [score: 0.4998]
 0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
                            [cf: 100]
 1.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
address
                            [220.184.70.162 listed in dnsbl.sorbs.net]
 0.1 RCVD_IN_NJABL_DUL      RBL: NJABL: dialup sender did non-local SMTP
                            [220.184.70.162 listed in combined.njabl.org]
 1.0 URIBL_SBL              Contains an URL listed in the SBL blocklist
                            [URIs: screegood.com]
 1.5 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL
blocklist
                            [URIs: screegood.com]


it seems that spamassassin on itself uses different tests on its own..

how could i implement those tests also in the use with mailscanner??

Thanks in advance..

Marcel

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!