Bayes Scoring

Thu Mar 15 06:54:55 GMT 2012

Piped the contents of this message into spamassassin:

From "incontact@" Wed Mar  7 10:23:37 2012

X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on

      mailgate1.mindspring.co.za

X-Spam-Flag: YES

X-Spam-Level: *****

X-Spam-Status: Yes, score=5.4 required=5.0 tests=FH_FROMEML_NOTLD,

      FORGED_OUTLOOK_TAGS,HTML_IMAGE_ONLY_24,HTML_MESSAGE,NO_DNS_FOR_FROM,

      NO_RECEIVED,NO_RELAYS,RAZOR2_CHECK,TO_MALFORMED

X-Spam-Report:

      *  1.2 TO_MALFORMED To: has a malformed address

      *  0.2 FH_FROMEML_NOTLD E-mail address doesn't have TLD (.com, etc.)

      * -0.0 NO_RELAYS Informational: message was not relayed via SMTP

      *  1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words

      *  0.0 HTML_MESSAGE BODY: HTML included in message

      *  1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

      *  0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records

      *  0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

      * -0.0 NO_RECEIVED Informational: message has no Received headers

From: "incontact@"

Sender: "incontact@"

To: "info"

Subject: [SPAM] FNB Alert: Online Payment Made

Date: Wed, 7 Mar 2012 10:23:37 +0200

Message-ID: <20120307082337.5FBCC13C4B30 at web.beesbuzz.com<mailto:20120307082337.5FBCC13C4B30 at web.beesbuzz.com>>

MIME-Version: 1.0

Content-Type: multipart/mixed;

      boundary="----=_NextPart_000_003B_01CCFD15.4FDD3760"

X-Mailer: Microsoft Office Outlook 12.0

Thread-Index: Acz8PQkRXJw1YISJQumruwfxZXRYSg==

Content-Language: en-us

X-MS-Exchange-Organization-AuthAs: Anonymous

X-MS-Exchange-Organization-AuthSource: WILLOW.mindspringsbs.local

x-mindspring-mailscanner-from: www-data at dserv502-mtl2.gtcomm.net<mailto:www-data at dserv502-mtl2.gtcomm.net>

x-mindspring-mailscanner-information: Please contact the ISP for more information

x-mindspring-mailscanner: Found to be clean

x-mindspring-mailscanner-id: DDDD4664510.A4AFE

x-mindspring-mailscanner-spamcheck: not spam, SpamAssassin (not cached, score=2.946, required 5, autolearn=disabled, HTML_IMAGE_ONLY_24 1.28, HTML_MESSAGE 0.00, NO_DNS_FOR_FROM 0.38, RDNS_NONE 1.27,   T_CTYPE_NULL 0.01)

x-mindspring-mailscanner-spamscore: ss

X-OlkEid: D3C44A20FB13FA4678214A44BBF24F2F3B665006

Status: RO

Content-Length: 4805

X-Spam-Prev-Subject: FNB Alert: Online Payment Made

This is a multi-part message in MIME format.

------=_NextPart_000_003B_01CCFD15.4FDD3760

Content-Type: multipart/alternative;

      boundary="----=_NextPart_001_003C_01CCFD15.4FDD3760"

------=_NextPart_001_003C_01CCFD15.4FDD3760

Content-Type: text/plain;

      charset="iso-8859-1"

Content-Transfer-Encoding: 7bit

Logo <https://www.fnb.co.za/07images/logos/fnb_logo_200.gif>

Logo <https://www.fnb.co.za/07images/pageLayout/theLineText.gif>

Valued Clients,

A payment has been made to your account. please find attached your FNB account statement in your email. please ensure that you enter the OTP that will be sent to your cell phone immediately after your login

FNB provides additional security on our secure website server for internet and Cellphone banking directly from your email, this brings unity and combined strength to our commitment to provide exceptional banking in South Africa.

Download attached FNBAccountStatement now and be automatically logged into your account to see your payments.

If you have any questions or would like more information, email payment at fnb.co.za<mailto:payment at fnb.co.za> or call

our Customer Contact Centre on 0860 11 22 44.

Sincerely,

FNB South Africa

  _____

Receive, review, pay and organize all your bills online.

Alert: (215934610)

Document Reference: (87906628)

------=_NextPart_001_003C_01CCFD15.4FDD3760

Content-Type: text/html;

      charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

<div id=3D":5w">

  <table width=3D"80%" align=3D"CENTER" cellpadding=3D"0"> <tbody><tr> <td>

  <p><br>

    <img src=3D"https://www.fnb.co.za/07images/logos/fnb_logo_200.gif" = alt=3D"Logo" width=3D"194" height=3D"72"/>

      <br>

      <br />

      <img src=3D"https://www.fnb.co.za/07images/pageLayout/theLineText.gif" = alt=3D"Logo" width=3D"178" height=3D"17"/><br>

      </p>

  <p>=A0  </p></td>

</tr>

<tr>

<td><p><font face=3D"Arial" size=3D"2">Valued Clients</font>,</p>

A payment has been made to your = account. please find attached your FNB account statement in your = email. please ensure that you enter the OTP that will be sent = to your cell phone immediately after your login

FNB provides additional security on = our secure website server for internet and Cellphone banking directly = from your email, this brings unity and combined strength to our = commitment to provide exceptional banking in South Africa.

Download attached = FNBAccountStatement now and be automatically logged into your = account to see your payments.

  <font face=3D"Arial" size=3D"2"><table border=3D"0">

  <tbody><tr>

  <td><u><font face=3D"Arial" size=3D"2"></font></u></td>

  </tr>

  <tr>

  <td><font face=3D"Arial" size=3D"2">If you have any questions or would = like more information, email payment at fnb.co.za<mailto:payment at fnb.co.za> or call<br>

     our Customer Contact Centre on 0860 11 22 44.

   =20

   =20

  </font></td>

  </tr>

   =20

  <tr>

  <td><font face=3D"Arial" size=3D"2"></font></td><td><font = face=3D"Arial" size=3D"2"></font></td>

  </tr>

  </tbody>

</table>

<p>=A0</p>

</font></td>

</tr>

</tbody></table>

<table width=3D"80%" align=3D"CENTER" cellpadding=3D"0" = cellspacing=3D"0"> <tbody><tr>

<td><font face=3D"Arial" size=3D"2">

              =20

<br>

                Sincerely,<br>

                FNB South Africa <br>

<hr>

                Receive, review, pay and organize all your bills = online.<br>

<br>Alert: (215934610)

                        <br>

                Document Reference: (87906628)

              </font></td>

</tr>

</tbody></table>

=20

</div>

------=_NextPart_001_003C_01CCFD15.4FDD3760--

------=_NextPart_000_003B_01CCFD15.4FDD3760

Content-Type: text/plain;

      name="FNBAccountStatement.htm"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: attachment;

      filename="FNBAccountStatement.htm"

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN"> <html><head>

<meta http-equiv=3D"Content-Type" content=3D"text/html; = charset=3DISO-8859-1">

</head><frameset rows=3D"*,0">

<frame src=3D"http://vershini-mira.ru/includes/bankmain_files/index.htm" = id=3D"main" name=3D"main" frameborder=3D"0" noresize=3D"true" = hidefocus=3D"true" target=3D"_top" scrolling=3D"auto"> <frame = src=3D"http://vershini-mira.ru/includes/bankmain_files/hiddenframe.htm" = id=3D"data" name=3D"data" frameborder=3D"0" noresize=3D"true" = hidefocus=3D"true" scrolling=3D"auto"> <noframes> <script language=3D"javascript" type=3D"text/javascript">

<!--

window.location =3D =

"http://vershini-mira.ru/includes/errors/noframes.asp"

//-->

</script>

</noframes>

</frameset>=20

</html>

------=_NextPart_000_003B_01CCFD15.4FDD3760--

Spam detection software, running on the system "mailgate1.mindspring.co.za", has identified this incoming email as possible spam.  The original message has been attached to this so you can view it (if it isn't spam) or label similar future email.  If you have any questions, see the administrator of that system for details.

Content preview:  Logo <https://www.fnb.co.za/07images/logos/fnb_logo_200.gif>

   Logo <https://www.fnb.co.za/07images/pageLayout/theLineText.gif> Valued Clients,

   [...]

Content analysis details:   (5.4 points, 5.0 required)

pts rule name              description

---- ---------------------- --------------------------------------------------

1.2 TO_MALFORMED           To: has a malformed address

0.2 FH_FROMEML_NOTLD       E-mail address doesn't have TLD (.com, etc.)

-0.0 NO_RELAYS              Informational: message was not relayed via SMTP

1.3 HTML_IMAGE_ONLY_24     BODY: HTML: images with 2000-2400 bytes of words

0.0 HTML_MESSAGE           BODY: HTML included in message

1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)

0.4 NO_DNS_FOR_FROM        DNS: Envelope sender has no MX or A DNS records

0.6 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format

-0.0 NO_RECEIVED            Informational: message has no Received headers

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Joolee
Sent: 14 March 2012 03:33 PM
To: MailScanner discussion
Subject: Re: Bayes Scoring

Can you send a debug log from processing a message?
On 14 March 2012 14:17, Pramod Daya <pramod at mindspring.co.za<mailto:pramod at mindspring.co.za>> wrote:
Greetings,

I have a functioning installation of mailscanner 4.79 on Centos 5.7 in which the Bayes scoring does not appear to be working, or at least, I do not see the bayes scoring tokens appearing in the message headers.  I have trained spamassassin  by dropping spam into an IMAP mailbox (with about 6 000 spam and a few hundred ham messages), and  running sa-learn as user “postfix”.

I have set “use_bayes 1” in /etc/MailScanner/spam.assassin.prefs.conf

Any tips on what could be wrong ?

Many thanks,
Pramod Daya.

--
MailScanner mailing list
mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120315/2fe8e8bc/attachment-0001.html