Certain Spamassassin rules do not seem to be firing all of the time
Martin Hepworth
maxsec at gmail.com
Fri Jun 14 22:16:06 IST 2013
Hmm most if the extra rules youre hitting are dns based
I'd check youre running a local caching dns server on the scanning box and
that youre not timing out the network checks in sa too quickly
Martin
On Friday, 14 June 2013, Duncan, Brian M. wrote:
> Here is one more that just came in to me and was not tagged as Spam:****
>
> ** **
>
> http://pastebin.com/w8SJk660****
>
> ** **
>
> ** **
>
> Mailscanner/Spamassassin results:****
>
> ** **
>
> X-MailScanner-SpamCheck: not spam, SpamAssassin (score=2.999, required 6.5,
> ****
>
> BAYES_60 3.00, RP_MATCHES_RCVD -0.00)****
>
> ** **
>
> ** **
>
> --test-mode results:****
>
> ** **
>
> Content analysis details: (10.5 hits, 6.5 required)****
>
> 6.6 BAYES_99 BODY: Bayes spam probability is 99 to 100%****
>
> [score: 1.0000]****
>
> -0.0 RP_MATCHES_RCVD Envelope sender domain matches handover relay
> domain****
>
> 2.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level****
>
> above 50%****
>
> [cf: 100]****
>
> 8.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)****
>
> 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%****
>
> [cf: 100]****
>
> -7.5 AWL AWL: From: address is in the auto white-list**
> **
>
> ** **
>
> ------ End of SpamAssassin results, Original message follows --------****
>
> ** **
>
> ===========================================================
> CIRCULAR 230 DISCLOSURE: Pursuant to Regulations Governing Practice Before the Internal Revenue
> Service, any tax advice contained herein is not intended or written to be used and cannot be used
> by a taxpayer for the purpose of avoiding tax penalties that may be imposed on the taxpayer.
> ===========================================================
> CONFIDENTIALITY NOTICE:
> This electronic mail message and any attached files contain information intended for the exclusive
> use of the individual or entity to whom it is addressed and may contain information that is
> proprietary, privileged, confidential and/or exempt from disclosure under applicable law. If you
> are not the intended recipient, you are hereby notified that any viewing, copying, disclosure or
> distribution of this information may be subject to legal restriction or sanction. Please notify
> the sender, by electronic mail or telephone, of any unintended recipients and delete the original
> message without making any copies.
> ===========================================================
> NOTIFICATION: Katten Muchin Rosenman LLP is an Illinois limited liability partnership that has
> elected to be governed by the Illinois Uniform Partnership Act (1997).
> ===========================================================
>
>
--
--
Martin Hepworth, CISSP
Oxford, UK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20130614/afa54b77/attachment.html
More information about the MailScanner
mailing list