A lot of spam getting through

[Anthony Peacock]

Hi,

Billy A. Pumphrey wrote:
>>> After looking at a few emails I can see that pyzor and DCC and bayes
> are
>>> scoring:
>>> Score Matching Rule Description
>>> cached not
>>>  score=24.094
>>> 6 required
>>>  autolearn=spam
>>> 2.17 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
>>> 0.33 FH_DATE_ISNT_2006
>>> 0.77 FH_DATE_ISNT_200X
>>> 0.40 FH_LEADINGPREP
>>> 0.71 FS_START_BUY
>>> 3.70 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
>>> 0.61 SARE_SXLIFE Talks about your sex life
>>> 3.81 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
>>> 4.09 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
>>> 3.01 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
>>> 4.50 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
>> Are these the scores that your system gives to one of the emails that
>> are gettig through?  If so that scored 24 points.  So this email
> should
>> have been filtered.  This suggests to me that the problem isn't with
> SA
>> but with something in your MailScanner settings.
>>
> 
> This email was tagged as spam so good to go there.

So, help us out and show us the scores and headers from one that does 
get through.  We might be able to see where they are failing then.

Even better...  Save one of the misdiagnosed emails as a text file, post 
it to a web address and let us know.  We can then run that email through 
our systems and tell you what scores we get and what rules helped.

> 
>> If these aren't the scores from one of the emails that are getting
>> through can you save an email to a text file and send the output of
> the
>> following command:
>>
>> spamassassin --test-mode < email.txt
>>
>>
>>
>> --
>> Anthony Peacock
>> CHIME, Royal Free & University College Medical School
>> WWW:    http://www.chime.ucl.ac.uk/~rmhiajp/
>> "If you have an apple and I have  an apple and we  exchange apples
>> then you and I will still each have  one apple. But  if you have an
>> idea and I have an idea and we exchange these ideas, then each of us
>> will have two ideas." -- George Bernard Shaw
>> --
> 
> 


-- 
Anthony Peacock
CHIME, Royal Free & University College Medical School
WWW:    http://www.chime.ucl.ac.uk/~rmhiajp/
"If you have an apple and I have  an apple and we  exchange apples
then you and I will still each have  one apple. But  if you have an
idea and I have an idea and we exchange these ideas, then each of us
will have two ideas." -- George Bernard Shaw