Hi, Sorry if this has been mentioned before. I seem to remember that it might have been, but I can't find it.
Just had a spam arrive that was given a -3.3 score for "ALL_TRUSTED". Funny thing is that my local.cf contains the following: # we trust our local network # removed: sa never used for internal originating spam. clear_trusted_networks #trusted_networks 143.210. #internal_networks 143.210. because I commented the lines out a couple of months or more ago. SA is only run (using exiscan) for messages coming in to our network from external hosts, so it should never fire on this rule as far as I can see. Is this bug related? http://bugzilla.spamassassin.org/show_bug.cgi?id=3949 Message headers are below. You may notice that there is one received header missing in the chain as we have an internal old broken sendmail system that doesn't add the headers sometimes, but that will be fixed in a few months when it's switched off! Any ideas? I think the best plan now is the just set the score of ALL_TRUSTED to 0? Thanks Matthew Return-path: <[EMAIL PROTECTED]> Delivery-date: Fri, 04 Mar 2005 14:25:28 +0000 Received: from mailsend.le.ac.uk ([143.210.16.127] helo=athena.le.ac.uk) by falcon.le.ac.uk with esmtp (Exim 3.35 #1 (Debian)) id 1D7Dk8-00011I-00; Fri, 04 Mar 2005 14:25:28 +0000 Received: from [143.210.8.56] (helo=harrier.le.ac.uk) by athena.le.ac.uk with esmtp (Exim 4.44) id 1D7Dk7-000459-IV for [EMAIL PROTECTED]; Fri, 04 Mar 2005 14:25:28 +0000 Received: from [71.8.202.198] (helo=asiancityweb.com) by apollo.le.ac.uk with esmtp (Exim 4.44) id 1D7Dk3-0001hO-Vg for [EMAIL PROTECTED]; Fri, 04 Mar 2005 14:25:26 +0000 Message-ID: <[EMAIL PROTECTED]> From: "Ines Hodge" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: I'll Give it some time. Date: Fri, 04 Mar 2005 06:24 MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 X-Spam-Score: (/) 0.0 X-Spam-Report: This e-mail has been scored by SpamAssassin 3.0.2 Pts Rule name Description ---- ---------------------- --------------------------------------- 0.2 INVALID_DATE Invalid Date: header (not RFC 2822) -3.3 ALL_TRUSTED Did not pass through any untrusted hosts 2.7 MSGID_OUTLOOK_INVALID Message-Id is fake (in Outlook Express +format) 0.0 HTML_40_50 BODY: Message is 40% to 50% HTML 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% [score: 0.5000] 0.1 HTML_FONT_BIG BODY: HTML tag for a big font size 0.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 +chars -- Matthew Newton <[EMAIL PROTECTED]> UNIX and e-mail Systems Administrator, Network Support Section, Computer Centre, University of Leicester, Leicester LE1 7RH, United Kingdom
