I've been looking at some of the spam emails I've received lately with images attached and noticed that FuzzyOCR wasn't running against them.
The same seems to be true when I take these messages and run them with: spamassassin -t < img-email.eml However if I run them through as follows, I get FuzzyOCR showing up in the results: spamassassin -t -D < img-email.eml I also get substantially different AWL results between the two (although I guess that maybe part of the debug procedure). Does anyone know why this might be happening? I seem to recall experiencing this before, but can't remember what I did to fix it. spamassassin -t: Content analysis details: (22.2 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [68.186.154.187 listed in zen.spamhaus.org] 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [68.186.154.187 listed in dnsbl.sorbs.net] 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% [score: 1.0000] 1.0 FH_HELO_EQ_CHARTER Helo is d-d-d-d charter.com 4.3 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC) 4.4 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2) 0.0 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 RDNS_DYNAMIC Delivered to trusted network by host with dynamic-looking rDNS 1.8 AWL AWL: From: address is in the auto white-list spamassassin -t -D: Content analysis details: (25.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 3.0 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [68.186.154.187 listed in zen.spamhaus.org] 1.2 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL 0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [68.186.154.187 listed in dnsbl.sorbs.net] 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% [score: 1.0000] 1.0 FH_HELO_EQ_CHARTER Helo is d-d-d-d charter.com 4.3 HELO_DYNAMIC_HCC Relay HELO'd using suspicious hostname (HCC) 4.4 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2) 0.0 FH_HELO_EQ_D_D_D_D Helo is d-d-d-d 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 RDNS_DYNAMIC Delivered to trusted network by host with dynamic-looking rDNS 10 FUZZY_OCR_KNOWN_HASH BODY: -5.2 AWL AWL: From: address is in the auto white-list
