Well, first, you need to realize that stripping the headers off completely invalidates sample-spam.txt as a sample spam message. SA gets a LOT of its score from the header based checks and the body rules are there to catch what the header rules can't.

Which scoreset does your SA use? (ie: are you using RBLs or other network tests? are you using Bayes?)

From a causal glance at the scores, I'm guessing you use RBLs and not bayes. In a RBL enabled setup, a lot of the body rules wind up having fairly weak scores. This is compensated for by the very strong scores added by RBL checks, but since you are sending this to yourself, none of the match.

However no matter what setup you use, the body of sample-spam.txt will not be enough to get the message tagged. It's the header based rules that are doing most of the work on this sample message.

If you want to force a message to be tagged to test your processing, stick a GTUBE string in a message:

body GTUBE /XJS\*C4JDBQADN1\.NSBN3\*2IDNEN\*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL\*C\.34X/

Just remove all the /'s and \'s from the above string and you've got a valid GTUBE test string.


At 07:00 PM 5/30/2003 +0100, Dr. Ongo wrote:


X-Spam-Status: No, hits=1.7 tagged_above=-999.0 required=6.3
 tests=DRASTIC_REDUCED, MSGID_GOOD_EXCHANGE, ONCE_IN_LIFETIME, REMOVE_SUBJ
X-Spam-Level: **

version 2.55

----- Original Message -----
From: "Evan Platt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 30, 2003 5:11 PM
Subject: Re: [SAtalk] sample-spam.txt


> At 07:57 AM 05/30/2003, you wrote: > >Hello > > > >if i send myself the content of this file minus all the header stuff, it > >doesnt register as spam ?? > > > >hits = 1.7 > > > >should it be recognised as spam ????? > > What version are you on? What were the hits? > > Myne scored a 4.3 with just the body (not headers): > > X-Spam-Status: No, hits=4.3 required=5.0 > tests=DRASTIC_REDUCED,MSG_ID_ADDED_BY_MTA_3,REMOVE_SUBJ > version=2.54 > > > > ------------------------------------------------------- > This SF.net email is sponsored by: eBay > Get office equipment for less on eBay! > http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk >




------------------------------------------------------- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk



------------------------------------------------------- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to