[SA-exim] wont't detect spam correctly

Bikesh Patel bpatel at tum.net
Tue May 11 14:44:32 PDT 2004


Folks,
I'm running SA-Exim as local_scan:
somehow a good amount is making through when running as localscan
and the same email is tagged spam correctly when running as transport


The following is NOT tagged spam, when it is in SA-Exim
-------------------------------------------
Return-path: <drake_elsie at cox.net>
Reply-To: "zula heredia" <heredia at bezeqint.net>
From: "zula heredia" <zula at bezeqint.net>
X-SA-Exim-Connect-IP: 67.66.107.43
X-SA-Exim-Mail-From: drake_elsie at cox.net
Subject: Fwd: V^|cod|n & v|@grA ` Va+l+ium & XAN at X So|m|a ' Pnte.r.min umodhrnsojsa
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on hostname
X-Spam-Level: ***
X-Spam-Status: No, hits=3.8 required=5.0
tests=BAYES_90,BIZ_TLD,HTML_70_80,
        HTML_MESSAGE,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI autolearn=no
        version=2.63
X-SA-Exim-Version: 4.0 (built Sun Apr 18 20:21:57 EDT 2004)
X-SA-Exim-Scanned: Yes (on hostname)
-----------------------------------------------------------------------------------

now running the same email saved with all headers
spamassassin -t < spam

------------------------------------------------------------------
Reply-To: "zula heredia" <heredia at bezeqint.net>
From: "zula heredia" <zula at bezeqint.net>
To: "Lisa" <lisa at removed>
Date: Tue, 11 May 2004 21:06:45 +0600
MIME-Version: 1.0 (produced by spurgecensorious 5.9)
Subject: Fwd: V^|cod|n & v|@grA ` Va+l+ium & XAN at X So|m|a ' Pnte.r.min umodhrnsojsa
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on hostname
X-Spam-Level: *******
X-Spam-Status: Yes, hits=7.1 required=5.0
tests=BAYES_99,BIZ_TLD,HTML_70_80,
        HTML_MESSAGE,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI autolearn=no
        version=2.63
X-Spam-Report:
        *  0.1 HTML_MESSAGE BODY: HTML included in message
        *  5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
        *      [score: 0.9993]
        *  0.1 HTML_70_80 BODY: Message is 70% to 80% HTML
        *  0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
        *  0.1 BIZ_TLD URI: Contains a URL in the BIZ top-level domain
        *  1.1 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts

...

Spam detection software, running on the system "", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email.  If you have any questions, see
spam_report at hostname  for details.

Content preview:  livinghealthy.biz A Hi Lisa, [...]

Content analysis details:   (7.1 points, 5.0 required)

 pts rule name              description
---- ----------------------
--------------------------------------------------
 0.1 HTML_MESSAGE           BODY: HTML included in message
 5.4 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 0.9993]
 0.1 HTML_70_80             BODY: Message is 70% to 80% HTML
 0.3 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 0.1 BIZ_TLD                URI: Contains a URL in the BIZ top-level
domain
 1.1 MIME_HTML_ONLY_MULTI   Multipart message only has text/html MIME
parts




Thanks
Bikesh



More information about the SA-Exim mailing list