This message was right on the border of qualifying (4.9 out of 5.0). You might try lowering your qualifying score (required_hits in /etc/mail/spamassassin/local.cf) or increasing the score on rules that you think are strongly indicative of spam (I think FROM_ALL_NUMS might be a good candidate).
jagadindu RoyChaudhuri wrote: > Hi, > For lon time we are facing , large number of attacks from spam. Our > mail box > is receving lot of spams , every day. Here we have installed qmail > toaster with jack vicker's spam rules. But still the problem persists. > Listed bellow is a full header of typical spam mail. We will highly > appreciate , for any kind of help :- > > Jagadindu Roy Chaudhuri > > *Return-Path:* <[EMAIL PROTECTED] > <http://10.1.1.25/webmail/src/compose.php?send_to=95%40yahoo.com>> > *Delivered-To:* [EMAIL PROTECTED] > <http://10.1.1.25/webmail/src/compose.php?send_to=jrc%40bhu.ac.in> > *Received:* (qmail 11542 invoked by uid 89); 2 Mar 2007 09:53:50 -0000 > *DomainKey-Status:* no signature > *Received:* by simscan 1.2.0 ppid: 11528, pid: 11533, t: 0.0826s > scanners: attach: 1.2.0 clamav: 0.88.6/m:41/d:2239 spam: 3.1.7 > *X-Spam-Checker-Version:* SpamAssassin 3.1.7 (2006-10-05) on mail.bhu.ac.in > *X-Spam-Level:* **** > *X-Spam-Status:* No, score=4.9 required=5.0 > tests=BAYES_00,FORGED_YAHOO_RCVD, > FROM_ALL_NUMS,NO_REAL_NAME,SUB_HELLO autolearn=no version=3.1.7 > *Received:* from unknown (HELO smtp) (202.141.107.15) > by mail.bhu.ac.in with SMTP; 2 Mar 2007 09:53:50 -0000 > *Received-SPF:* none (mail.bhu.ac.in: domain at yahoo.com does not > designate permitted sender hosts) > *Received:* from smtp (unknown [127.0.0.1]) > by smtp (Symantec Mail Security) with ESMTP id 2EF8ED4B77 > for <[EMAIL PROTECTED] > <http://10.1.1.25/webmail/src/compose.php?send_to=jrc%40bhu.ac.in>>; > Fri, 2 Mar 2007 15:03:56 +0530 (IST) > *X-AuditID:* ca8d6b0f-af556bb0000007be-c2-45e7ed1497d6 > *From:* [EMAIL PROTECTED] > <http://10.1.1.25/webmail/src/compose.php?send_to=95%40yahoo.com> > *To:* [EMAIL PROTECTED] > <http://10.1.1.25/webmail/src/compose.php?send_to=jrc%40bhu.ac.in> > *Subject:* Hello > *Mime-Version:* 1.0 > *Content-Type:* multipart/mixed; boundary="=====mte=boundary=number=1=====" > *X-Brightmail-Tracker:* AAAAAA== > *Message-Id:* <[EMAIL PROTECTED]> > *Date:* Fri, 2 Mar 2007 15:03:56 +0530 (IST) > > > > ------------------------------------------------------------------------ > Here’s a new way to find what you're looking for - Yahoo! Answers > <http://us.rd.yahoo.com/mail/in/yanswers/*http://in.answers.yahoo.com/> -- -Eric 'shubes' --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
