Ken Morley wrote: > I'm using Postfix 2.4.6, Amavisd-new 2.5.2, ClamAV 0.91.2 and > Mail-SpamAssassin 3.2.3 in a Linux mail filter. > > As I recall, SA used to have some rules that penalized e-mail > originating from mass-emailing applications like "The Bat!". I see > some of these now slipping through and don't see where they are scored > negatively. Have those rules been obsoleted?
The Bat! isn't a mass-emailing application. It's an ordinary end-user mail client that many spammers like to forge, just like outlook/oe. Several list members use The Bat.. check your headers. A long time ago (pre 2.6), SA had a *NEGATIVE* scoring rule for the bat, and several other legitimate email clients. Spammers abused that so it was removed. Spammers don't put their actual tools in their User-Agent or X-Mailer headers. Otherwise you'd see a lot of things like: "Storm-Worm backend 1.5"
