RCVD_IN_BSP_TRUSTED

[Jim Coates]

>-----Original Message-----
>From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Matt
>>Kettler
>Sent: Monday, October 23, 2006 12:34 PM
>To: MailScanner discussion
>Subject: Re: RCVD_IN_BSP_TRUSTED
>
>
>Jim Coates wrote:
>> Hello all...
>> 
>> I've been looking through a good deal of the image spam that is making 
>> it past my MailScanner system and was noticing that almost all of them 
>> are tripping the "RCVD_IN_BSP_TRUSTED" test.  This is turn reverses 
>> the spam score significantly and passes the email.
>> 
>> Have any of you been having issues with this test?  It seems like it 
>> is defeating the very purpose that Bonded Sender was intended for.
>
>No,I don't have any issues with it.
>
>At casual glance it sounds like you have a broken trust path.. Have you
been having problems with ALL_TRUSTED, and DUL type RBLs too?
>
>http://wiki.apache.org/spamassassin/TrustPath
>
>> 
>> Thanks,
>> Jim Coates
>> 


Matt,

No - I believe the other tests have been working fine.  Here are a few
examples of test results:

MailScanner-SpamCheck: not spam, SpamAssassin (score=-3.797,
 required 5, autolearn=not spam, BAYES_20 -1.95, HTML_10_20 0.25,
 HTML_IMAGE_RATIO_08 0.03, HTML_MESSAGE 0.00, MIME_HTML_ONLY 0.18,
 RCVD_IN_BSP_TRUSTED -4.30, RCVD_NUMERIC_HELO 1.25,
 SARE_GIF_ATTACH 0.75)

MailScanner-SpamCheck: not spam, SpamAssassin (score=4.084,
 required 5, BAYES_00 -2.60, HTML_10_20 0.25, HTML_IMAGE_ONLY_24 0.50,
 HTML_IMAGE_RATIO_08 0.03, HTML_MESSAGE 0.00, MIME_HTML_ONLY 0.18,
 RCVD_IN_BL_SPAMCOP_NET 1.22, RCVD_IN_BSP_TRUSTED -4.30,
 RCVD_IN_NJABL_DUL 0.09, RCVD_IN_SORBS_DUL 1.99, RCVD_IN_XBL 3.08,
 RCVD_NUMERIC_HELO 1.25, SARE_GIF_ATTACH 0.75, SARE_GIF_STOX 1.66)

MailScanner-SpamCheck: not spam, SpamAssassin (score=-0.016,
 required 5, BAYES_00 -2.60, HTML_10_20 0.25, HTML_IMAGE_ONLY_24 0.50,
 HTML_IMAGE_RATIO_08 0.03, HTML_MESSAGE 0.00, MIME_HTML_ONLY 0.18,
 RCVD_IN_BL_SPAMCOP_NET 1.22, RCVD_IN_BSP_TRUSTED -4.30,
 RCVD_IN_XBL 3.08, RCVD_NUMERIC_HELO 1.25, TW_IJ 0.08, TW_IK 0.08,
 TW_JG 0.08, TW_JK 0.08, TW_JS 0.08)

All three of these came from inline image spam.  All three managed to get a
pretty big boast in the HAM direction because of the BSP_TRUSTED rule.

Jim