OK, didn't take long to get such an example. :-)
http://rafb.net/p/rqOjCJ11.html
This made it through. As can be seen from the headers it got a 2.9
score only and didn't match MIME_IMAGE_ONLY which certainly would have
pushed it over the top.
When I tried passing it to SA on the command line using 'spamassassin
-Lt < sample-email.txt' I got:
Content analysis details: (0.1 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.1 RDNS_DYNAMIC Delivered to trusted network by host with
dynamic-looking rDNS
0.0 DYN_RDNS_AND_INLINE_IMAGE Contains image, and was sent by dynamic
rDNS
... so virtually nothing matched. :-( Any ideas would be appreciated.
Best regards,
Jeremy Morton (Jez)
Jeremy Morton wrote:
Hmm, well now it's getting 6.4 from the commandline and seems to be
matching more appropriate rules. Maybe it was because I ran sa-update;
I'll keep you posted if more of them get through.
Best regards,
Jeremy Morton (Jez)
John Hardin wrote:
On Thu, 14 May 2009, Jeremy Morton wrote:
Here's an example of a spam message that got through my SA installation:
http://rafb.net/p/fcy9wY66.html
As you can see from the report header, this hasn't matched several
rules I think it should have done (like MIME_IMAGE_ONLY) - is my SA
installation screwed up or is there something in particular I need to
do to get that rule being matched?
What happens when you run that message through SA from the command line
in test mode with debugging turned on? Can you post the debug log from
that same message to pastebin?