Better you get the occasional spam through then get real email blocked IMHO.<br><br>have a look on the wiki about tuning SA<br><br>Also I see no mention of any bayes score here so it&#39;s worth checking that&#39;s working.<br>
<br clear="all">Martin Hepworth<br>Oxford, UK<br>
<br><br><div class="gmail_quote">On 8 September 2010 12:11, Milind Patil <span dir="ltr">&lt;<a href="mailto:Milind.Patil@newswire18.com">Milind.Patil@newswire18.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">









<div link="blue" vlink="purple" lang="EN-IN">

<div>

<p class="MsoNormal">Hi </p>

<p class="MsoNormal"> </p>

<p class="MsoNormal">               
I have installed MailScanner with Sendmail and ClamAV, the setup is working
fine, but occasionally some spam passes through the MailScanner/Spamassassin. For
e.g. please find the below mail received by one of the user and the
spamassassin score report, I have kept number 6 as the cut-off for spam. My
question is there is a word Viagra in the mail (Subject) then why spamassassin
is not marking it as spam.</p>

<p class="MsoNormal"> </p>

<p class="MsoNormal">Please help.</p>

<p class="MsoNormal"> </p>

<p class="MsoNormal">Regards</p>

<p class="MsoNormal">Milind Patil</p>

<p class="MsoNormal"> </p>

<p class="MsoNormal">====</p>

<p>-----Original Message-----</p>

<p>From: Leatha [mailto:<a href="mailto:cahua9618@arcor-ip.net" target="_blank">cahua9618@arcor-ip.net</a>] </p>

<p>Sent: Wednesday, September 08, 2010 1:48 PM</p>

<p>To: Debjit Chakraborty</p>

<p>Subject: Better-than-ever prices on Viagra</p>

<p> </p>

<p class="MsoNormal">====</p>

<p class="MsoNormal"> </p>

<p class="MsoNormal">And this is the Spamassassin score</p>

<p class="MsoNormal"> </p>

<p class="MsoNormal">====</p>

<p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">SpamAssassin
Score:5.27 Spam Report:</span></p>

<table style="width: 100%;" border="0" cellpadding="0" width="100%">
 <thead>
  <tr>
   <td style="padding: 0.75pt;">
   <p class="MsoNormal"><b><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">Score</span></b></p>
   </td>
   <td style="padding: 0.75pt;">
   <p class="MsoNormal"><b><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">Matching
   Rule</span></b></p>
   </td>
   <td style="padding: 0.75pt;"></td>
  </tr>
 </thead>
 <tbody><tr>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">2.22</span></p>
  </td>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">DRUGS_ERECTILE</span></p>
  </td>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;"> </span></p>
  </td>
 </tr>
 <tr>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">1.27</span></p>
  </td>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">RDNS_NONE</span></p>
  </td>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;"> </span></p>
  </td>
 </tr>
 <tr>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">0.00</span></p>
  </td>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">SPF_HELO_FAIL</span></p>
  </td>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;"> </span></p>
  </td>
 </tr>
 <tr>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">0.00</span></p>
  </td>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">TVD_SPACE_RATIO</span></p>
  </td>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;"> </span></p>
  </td>
 </tr>
 <tr>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">1.77</span></p>
  </td>
  <td style="padding: 0.75pt;">
  <p class="MsoNormal"><span style="font-size: 12pt; font-family: &quot;Times New Roman&quot;,&quot;serif&quot;;">URIBL_BLACK</span></p>
  </td>
  <td style="padding: 0.75pt;"></td>
 </tr>
</tbody></table>

<p class="MsoNormal">=====</p>

<p class="MsoNormal"> </p>

</div>

</div>


<br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>