Clay Here's what rules hit on my system
Content analysis details: (29.1 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.9 HOST_EQ_PL HOST_EQ_PL 1.1 HELO_EQ_PL HELO_EQ_PL 1.1 SPF_NEUTRAL SPF: sender does not match SPF record (neutral) [SPF failed: Please see http://spf.pobox.com/why.html?sender=evstigneev%40charlyemery.com&ip=213 .227.72.45&receiver=towers.solid-state-logic.com] 5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100% [score: 1.0000] 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level above 50% [cf: 56] 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 3.7 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/) 3.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: techinfoserv.com] 4.1 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: techinfoserv.com] 3.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist [URIs: techinfoserv.com] 0.8 DIGEST_MULTIPLE Message hits more than one network digest check 1.0 SPAMMY_XMAILER X-Mailer string is common in spam and not in ham The big hits are Pyzor, razor and the URIBL set.....I'd check you've got the URIRBL plugin installed and the Net::DNS perl module.. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 > -----Original Message----- > From: Clay Davis [mailto:[EMAIL PROTECTED] > Sent: 11 January 2007 16:14 > To: Martin.Hepworth; users@spamassassin.apache.org > Subject: RE: Avoiding Bayes Poison > > Martin, not sure how/what pastebin. Sorry. Here it is zipped though. > > Instructions to pastebin? > > Thanks, > Clay > > >>> On 1/11/2007 at 10:52 AM, in message > <[EMAIL PROTECTED]>, "Martin.Hepworth" > <[EMAIL PROTECTED]> wrote: > > Clay > > Can you pastebin the entire email (header info as well) and post me the > link. > > I'll run it over my system (which has lots and lots of extra rules from > the SARE team etc) and see if we get the thing scoring properly.. > > -- > Martin Hepworth > Snr Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > > -----Original Message----- > > From: Clay Davis [mailto:[EMAIL PROTECTED] > > Sent: 11 January 2007 15:44 > > To: Martin.Hepworth; users@spamassassin.apache.org > > Subject: RE: Avoiding Bayes Poison > > > > No its all kinda like the attached. > > C > > > > >>> On 1/11/2007 at 10:03 AM, in message > > <[EMAIL PROTECTED]>, > "Martin.Hepworth" > > <[EMAIL PROTECTED]> wrote: > > > > ; Clay > > > > This spam hasn't got a nice image in it with the actual spam message > in > > it has it?? > > > > -- > > Martin Hepworth > > Snr Systems Administrator > > Solid State Logic > > Tel: +44 (0)1865 842300 > > > > > -----Original Message----- > > > From: Clay Davis [mailto:[EMAIL PROTECTED] > > > Sent: 11 January 2007 14:58 > > > To: users@spamassassin.apache.org > > > Subject: Avoiding Bayes Poison > > > > > > Over the past several months I have been saving the spam that slips > > > through to my users accounts to train my bayes with. I notice that > > lately > > > almost all of it has (what I am assuming to be) an attempt to poison > > my > > > bayes (a bunch of valid words put together in a nonsensical > paragraph) > > at > > > the bottom of it. > > > > > > How much should I worry about this type of spam and how it will > affect > > my > > > bayes db? Work arounds? Advice? > > > > > > Thanks, gang. > > > > > > Clay > > > > > > > > > > ********************************************************************** > > > > This email and any files transmitted with it are confidential and > > intended solely for the use of the individual or entity to whom they > > are addressed. If you have received this email in error please notify > > the system manager. > > > > This footnote confirms that this email message has been swept > > for the presence of computer viruses and is believed to be clean. > > > > ********************************************************************** > > > > > > > > ********************************************************************** > > This email and any files transmitted with it are confidential and > intended solely for the u se of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > This footnote confirms that this email message has been swept > for the presence of computer viruses and is believed to be clean. > > ********************************************************************** > ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. **********************************************************************
