Running spamassassin-3.1.0
I have `ok_locales en' set in local.cf. I had hoped that would cut
down on the amount of processing SA has to do, but I see messages with
a subject line like this:
Subject: Replicas dos melhores relogios
That still grind thru lots of processing and never did hit the
"CHARSET_FAR- AWAY_HEADERS"
Is there something else I need to tweak so that this is seen right
away and no further processing is done, or is setting ok_locales just
not all that usefull.
SA report on that message:
* 1.8 X_IP Message has X-IP header
* 3.6 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
* 3.4 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP
addr
* 1)
* 3.5 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant)
* 2.2 FORGED_HOTMAIL_RCVD Forged hotmail.com 'Received:' header found
* 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
* lines
* 0.2 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image
* area
* 0.9 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of
words
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.3 HTML_FONT_BIG BODY: HTML tag for a big font size
* 0.1 MPART_ALT_DIFF BODY: HTML and text parts are different
* 0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 1.5 MIME_BASE64_TEXT RAW: Message text disguised using base64
encoding
* 0.5 DNS_FROM_RFC_ABUSE RBL: Envelope sender in abuse.rfc-ignorant.org
* 3.1 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
* [70.35.234.34 listed in sbl-xbl.spamhaus.org]
* 2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
address
* [70.35.234.34 listed in dnsbl.sorbs.net]
* 1.8 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org
* [<http://dsbl.org/listing?70.35.234.34>]
* 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
bl.spamcop.net
* [Blocked - see <http://www.spamcop.net/bl.shtml?70.35.234.34>]
* 1.4 DNS_FROM_RFC_POST RBL: Envelope sender in
* postmaster.rfc-ignorant.org
* 3.5 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found
* 0.0 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME
* parts
* 1.4 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
* 1.0 FORGED_MUA_AOL_FROM Forged mail pretending to be from AOL (by
From)
* 0.0 REPTO_QUOTE_AOL AOL doesn't do quoting like this
