OK, didn't take long to get such an example.  :-)

http://rafb.net/p/rqOjCJ11.html

This made it through. As can be seen from the headers it got a 2.9 score only and didn't match MIME_IMAGE_ONLY which certainly would have pushed it over the top.

When I tried passing it to SA on the command line using 'spamassassin -Lt < sample-email.txt' I got:

Content analysis details:   (0.1 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.1 RDNS_DYNAMIC           Delivered to trusted network by host with
                            dynamic-looking rDNS
 0.0 DYN_RDNS_AND_INLINE_IMAGE Contains image, and was sent by dynamic
                            rDNS



... so virtually nothing matched.  :-(  Any ideas would be appreciated.

Best regards,
Jeremy Morton (Jez)

Jeremy Morton wrote:
Hmm, well now it's getting 6.4 from the commandline and seems to be
matching more appropriate rules. Maybe it was because I ran sa-update;
I'll keep you posted if more of them get through.

Best regards,
Jeremy Morton (Jez)

John Hardin wrote:
On Thu, 14 May 2009, Jeremy Morton wrote:

Here's an example of a spam message that got through my SA installation:

http://rafb.net/p/fcy9wY66.html

As you can see from the report header, this hasn't matched several
rules I think it should have done (like MIME_IMAGE_ONLY) - is my SA
installation screwed up or is there something in particular I need to
do to get that rule being matched?

What happens when you run that message through SA from the command line
in test mode with debugging turned on? Can you post the debug log from
that same message to pastebin?


Reply via email to