Certain Spamassassin rules do not seem to be firing all of the time

Martin Hepworth maxsec at gmail.com
Fri Jun 14 22:16:06 IST 2013


Hmm most if the extra rules youre hitting are dns based
I'd check youre running a local caching dns server on the scanning box and
that youre not timing out the network checks in sa too quickly

Martin

On Friday, 14 June 2013, Duncan, Brian M. wrote:

>  Here is one more that just came in to me and was not tagged as Spam:****
>
> ** **
>
> http://pastebin.com/w8SJk660****
>
> ** **
>
> ** **
>
> Mailscanner/Spamassassin results:****
>
> ** **
>
> X-MailScanner-SpamCheck: not spam, SpamAssassin (score=2.999, required 6.5,
> ****
>
>                 BAYES_60 3.00, RP_MATCHES_RCVD -0.00)****
>
> ** **
>
> ** **
>
> --test-mode results:****
>
> ** **
>
> Content analysis details:   (10.5 hits, 6.5 required)****
>
>  6.6 BAYES_99               BODY: Bayes spam probability is 99 to 100%****
>
>                             [score: 1.0000]****
>
> -0.0 RP_MATCHES_RCVD        Envelope sender domain matches handover relay
> domain****
>
>  2.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level****
>
>                             above 50%****
>
>                             [cf: 100]****
>
>  8.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)****
>
>  0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%****
>
>                             [cf: 100]****
>
> -7.5 AWL                    AWL: From: address is in the auto white-list**
> **
>
> ** **
>
> ------ End of SpamAssassin results, Original message follows --------****
>
> ** **
>
> ===========================================================
> CIRCULAR 230 DISCLOSURE: Pursuant to Regulations Governing Practice Before the Internal Revenue
> Service, any tax advice contained herein is not intended or written to be used and cannot be used
> by a taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer.
> ===========================================================
> CONFIDENTIALITY NOTICE:
> This electronic mail message and any attached files contain information intended for the exclusive
> use of the individual or entity to whom it is addressed and may contain information that is
> proprietary, privileged, confidential and/or exempt from disclosure under applicable law.  If you
> are not the intended recipient, you are hereby notified that any viewing, copying, disclosure or
> distribution of this information may be subject to legal restriction or sanction.  Please notify
> the sender, by electronic mail or telephone, of any unintended recipients and delete the original
> message without making any copies.
> ===========================================================
> NOTIFICATION:  Katten Muchin Rosenman LLP is an Illinois limited liability partnership that has
> elected to be governed by the Illinois Uniform Partnership Act (1997).
> ===========================================================
>
>

-- 
-- 
Martin Hepworth, CISSP
Oxford, UK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130614/afa54b77/attachment.html 


More information about the MailScanner mailing list