<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2654.45">
<TITLE>Spam autolearning and spam blacklists</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2 FACE="Arial">We're seeing a lot of these lately:</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Apr 25 10:33:32 external-smtp MailScanner[23350]: Message 75AE584846 from 4.7.254.117 (lnwbompvnxmso@attorney.ac) to localdomain.com is spam, spamcop.net, CBL, DSBL, SBL+XBL, SpamAssassin (score=0, required 7, autolearn=not spam)</FONT></P>
<P><FONT SIZE=2 FACE="Arial">This mail is certainly spam, but SpamAssassin doesn't have rules for it and hence not only gives it a 0 score but autolearns it as not spam. This is, of course, badly messing with our Bayes database. Is there any way to tell it (via MailScanner?) that if it hits 1 or more spam blacklists (4 in this case) it sohuld be autolearned as spam, regardless of SpamAssassin score?</FONT></P>
<P><B><FONT COLOR="#000080" FACE="Times New Roman">Andrew Magnusson</FONT></B><FONT COLOR="#000000" SIZE=2 FACE="Arial"> <BR>
</FONT><B></B><B></B><B><FONT COLOR="#000080" FACE="Times New Roman">Internet Product Analyst</FONT></B><BR>
<B><I></I></B><B><I><FONT COLOR="#000080" SIZE=4 FACE="Arial">COCC</FONT></I></B><I></I><BR>
<B></B><B></B><B><FONT COLOR="#000080" FACE="Times New Roman">1-877-678-0444 extension 640</FONT></B>
</P>
<BR>
</BODY>
<br>--<br>
<p>*** This message originates from COCC, Inc.<br>
<br>
If the reader of this message, regardless of the address or routing,
is not an intended recipient, you are hereby notified that you have
received this transmittal in error and any review; use, distribution,
dissemination or copying is strictly prohibited. If you have received
this message in error, please delete this e-mail and all files
transmitted with it from your system and immediately notify COCC, Inc.
by sending reply e-mail to the sender of this message. <br>
<br>
Thank you. ***</p>
</HTML>
-------------------------- MailScanner list ----------------------
To leave, send leave mailscanner to jiscmail@jiscmail.ac.uk
For further info about MailScanner, please see the Most Asked
Questions at http://www.mailscanner.biz/maq/ and the archives
at http://www.jiscmail.ac.uk/lists/mailscanner.html