PileOfMush wrote: > Can someone help me understand why a message can come through and get > one score, then I can scan it again 1 minute later and get a much > higher score? Here's the message. http://slexy.org/raw/s2JoVC8OlP The > top copy of the message was how it was scanned coming in. Immediately, > I rescanned the message with spamassassin -d -t (scroll down to see > it). I snipped off the bottom of the long boring stuff. I'm just > trying to understand what's going on here so I can maintain my sanity. > TIA
I see two big differences that jump out at me. As Duane suggested, were these run as the same user? The first thing that jumps out is that in the first run, URIBL_JP_SURBL scores 1.5 (default when bayes is enabled), but the second run it scores 2.9 (default when bayes is disabled). Also, the first run hit BAYES_00 for -2.6 points, but the second run did not hit bayes at all. It looks like your second run is as a user that doesn't have a bayes DB, but your first run does have one, and that bayes DB strongly thinks the message is not spam (less than 1% probability it is spam..). You might want to review your bayes training. See also: man sa-learn
