Hello John, Thanks for your quick response.
I am not sure that i understand your answer. Sorry i am not so experinece with SA. The score that i got for that specific example was: score=0.395,required 6.2, BAYES_20 -0.74, FORGED_RCVD_HELO 0.14,HTML_MESSAGE 1.00) There are many calculation parameters that are missing beside RAZOR - why is that. Does Razor costs? and is there configuration doc to how to set it up? Kindly regards, Yossi John Andersen wrote: > > Well even your message scored pretty high here. Were this mailing list > not whitelisted, it would have gone to /dev/null > > Maybe you should turn on Network tests and configure Razor? > > > > > On Tuesday 22 August 2006 23:24, yossim wrote: >> Spam detection software, running on the system "pen.homeip.net", has >> identified this incoming email as possible spam. The original message >> has been attached to this so you can view it (if it isn't spam) or label >> similar future email. If you have any questions, see >> The Administrator of that system for details. >> >> Content preview: Hi forum, recently i get a lot of spam emails with very >> low score mostly are text emails. How can i fine tune my SA in order to >> catch those emails? here is an exmple: [...] >> >> Content analysis details: (4.1 points, 3.9 required) >> >> pts rule name description >> ---- ---------------------- >> -------------------------------------------------- -0.0 SPF_PASS >> >> SPF: sender matches SPF record >> -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% >> [score: 0.0000] >> 0.0 HTML_MESSAGE BODY: HTML included in message >> 1.4 HTML_10_20 BODY: Message is 10% to 20% HTML >> 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level >> above 50% >> [cf: 100] >> 2.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) >> 3.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% >> [cf: 100] >> 1.0 URIBL_SBL Contains an URL listed in the SBL blocklist >> [URIs: pdahlmjr.com] >> 3.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist >> [URIs: pdahlmjr.com] >> -6.1 AWL AWL: From: address is in the auto white-list > > -- > _____________________________________ > John Andersen > > -- View this message in context: http://www.nabble.com/low-score-spam-tf2150828.html#a5940438 Sent from the SpamAssassin - Users forum at Nabble.com.
