Forgive my ignorance...

I assume that "negatively-scored" means that it is less likely to be spam,
correct?

Here is an example of a message that should have been flagged:

X-Spam-Status: No, score=4.7 required=5.0 tests=BAYES_50,HTML_10_20,
HTML_MESSAGE,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,
SARE_RECV_IP_218071,SPF_HELO_PASS,TW_GK,URIBL_SBL autolearn=no version=3.0.2

How do I read this and what do I do with this?  I assume this is what you
were asking me to look at, right?

...Jake

>>>>> "KP" == Kevin Peuhkurinen <[EMAIL PROTECTED]> writes:

   KP> You can begin by looking at the headers of false negatives and see
   KP> what rules they are hitting.  Are they hitting any negatively-scored
   KP> rules?

   KP> Jake Colman wrote:

   >> I upgraded from SA 2.x to 3.x a few weeks ago.  I also installed the 
Rules Du
   >> Jour script for maintaining SARE files.  After doing all this the amount 
of
   >> spam caught by SA increased dramatically.  All was well.
   >> 
   >> A few days ago I suddenly started having spam get through just like the 
bad
   >> days prior to my upgrade.  Is there some way for me to figure out why SA 
is
   >> not doing its thing for me?
   >> 
   >> 
   >> 

-- 
Jake Colman
Sr. Applications Developer
Principia Partners LLC
Harborside Financial Center
1001 Plaza Two
Jersey City, NJ 07311
(201) 209-2467
www.principiapartners.com

Reply via email to