Simon<div>the cached here means it's already seen it and scored it 'low'. Try removing the spamassassin cache and restarting mailscanner in the system.</div><div><br></div><div><br></div><div><a href="http://wiki.mailscanner.info/doku.php?id=maq:index#getting_the_best_out_of_spamassassin">http://wiki.mailscanner.info/doku.php?id=maq:index#getting_the_best_out_of_spamassassin</a><br>
</div><div><br></div><div><br></div><div>NB I'd say 3 a little low for a 'low spam threshold' anyway, you're quite likely to hit alot of ham. I'd look at what rulesets you've got and see if iXhasf and the sought ruleset (and others) help <br>
<br><div class="gmail_quote">2009/5/5 Simon Jones <span dir="ltr"><<a href="mailto:simonmjones@gmail.com">simonmjones@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hi folks,<br>
<br>
I'm running a distributed system, one of the gateways seems to have<br>
sprung a leek though and is letting some spam through which is being<br>
caught on the other systems. I copied the config files between the<br>
systems to ensure consistancy when the systems were built so I'm<br>
wondering if it could be some other weakness I haven't considered,<br>
perhaps a time-out or setitng which causes the messages to be sent<br>
through unscanned or part scanned perhaps? I'm using mailwatch too<br>
and can see the scores in the message headers, an example of one is<br>
below;<br>
<br>
thanks for any help or suggestions you may offer,<br>
<br>
2.44<br>
Spam Report: Score Matching Rule Description<br>
cached<br>
score=2.441<br>
3 required<br>
autolearn=disabled<br>
0.50 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d<br>
0.17 HTML_IMAGE_RATIO_04 HTML has a low ratio of text to image area<br>
0.00 HTML_MESSAGE HTML included in message<br>
1.67 MIME_HTML_ONLY Message only has text/html MIME parts<br>
0.10 RDNS_DYNAMIC Delivered to trusted network by host with dynamic-looking rDNS<br>
<font color="#888888">--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
</font></blockquote></div><br><br clear="all"><br>-- <br>Martin Hepworth<br>Oxford, UK<br>
</div>