David, Ah!!!!! Thanks.
That makes sense now. I forgot about hidetests hiding the results of the other filters. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of David Barker > Sent: Thursday, September 01, 2005 1:13 PM > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] Odd Spam Scoring? > > X-Note: Failed Weights: SORBS-DUHL [4], DYNHELO [7] is certain 11 but > check you global.cfg > > HIDETESTS CATCHALLMAILS IPNOTINMX NOLEGITCONTENT > > NOLEGITCONTENT nolegitcontent x x 0 -5 > IPNOTINMX ipnotinmx x x 0 > -3 > > SORBS-DUHL [4] > DYNHELO [7] > NOLEGITCONTENT [-5] > > Total = 6 > > David B > www.declude.com > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom > Sent: Thursday, September 01, 2005 1:27 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] Odd Spam Scoring? > > > > This spam came in today. Note that it was scored a weight of 6. Yet it > failed two tests that were supposed to add a weight of 4 and a weight of > 7. > > > Now, I wasn't the best in math but I believe 4 and 7 adds up to 11! There > were no negative weights assigned to account for this. > > Any ideas? > > > > > X-Priority: 3 > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook Express 6.00.2800.1106 > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 > X-RBL-Warning: SORBS-DUHL: "Dynamic IP Addresses See: > http://www.sorbs.net/lookup.shtml?70.23.152.133"; > X-RBL-Warning: DYNHELO: Dynamic HELO found. > X-RBL-Warning: SPFUNKNOWN: SPF returned UNKNOWN for this E-mail. > X-RBL-Warning: Filter_Country: Message failed Filter_Country test (line > 223, > weight 0) > X-Note: ======================================== > X-Note: Spam Score: [6] > X-Note: Scan Time: 10:13:22 on 01 Sep 2005 > X-Note: Spool File: 561528422420.EML > X-Note: Server Name: pool-70-23-152-133.ny325.east.verizon.net > X-Note: SMTP Sender: [EMAIL PROTECTED] > X-Note: Reverse DNS & IP: pool-70-23-152-133.ny325.east.verizon.net > [70.23.152.133] > X-Note: Recipient(s): [EMAIL PROTECTED] > X-Note: Country Chain: UNITED STATES->destination > X-Note: Failed Weights: SORBS-DUHL [4], DYNHELO [7], SPFUNKNOWN [0], > Filter_Country [0] > X-Note: ======================================== > > --- > [This E-mail scanned for viruses by Declude Virus] > > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
