> Another responded with a request for more info. I posted one small > message here...
That would have been me. ;) > http://emailacs.com/temp/J872209005Tq/7.txt > > The test score for that message was 6.269 ( 7 is required ) and the > tests that it hit were: > BAYES_80,DATE_IN_PAST_06_12,HS_BOBAX_MID_2,RDNS_NONE Note: No RBL hits. > ...however, when I manually run it through either spamc -c < 7.txt or > spamassassin -t 7.txt, it scores the following... How long after the initial check is that? If my quick timezone math is correct, according to the sample, it's about an hour. > Content analysis details: (16.4 points, 7.0 required) > > pts rule name description > ---- ---------------------- -------------------------------------------------- > 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL > [190.97.76.59 listed in zen.spamhaus.org] > 2.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL > 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address > [190.97.76.59 listed in dnsbl.sorbs.net] RBL hits. They most likely have been updated since the original scan. Since you get this result with a subsequent spamc run, too, we pretty much can rule out permanent DNS failures or local tests option. Still, a (potentially local) temporary DNS issue might explain it. Do you see any RBL hits on your incoming mail stream? What strikes me as odd is the additional PBL hit. This one isn't updated that frequently, is it? > 8.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% > [score: 0.9955] This is insane. Also, on the original scan, it scored BAYES_80. This *is* a difference, especially, if you did not raise that score like you did with BAYES_99. Your original headers don't show, if this message has been auto-learned. Did you train it manually? > 1.0 HS_BOBAX_MID_2 Bobax? Message-Id: <[EMAIL PROTECTED]> > 1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date > 0.1 RDNS_DYNAMIC Delivered to trusted network by host with > dynamic-looking rDNS Please re-read my previous post with the generic explanation, carefully. The above pretty much confirms everything I mentioned there. With the sole exception of AWL. guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
