OK,
So you are testing to see how SA scores artificial mail messages.
However SA is designed to evaluate real mail messages, not botched
fabrications of them, so I don't understand what you are trying to achieve.
You have (either deliberately or unknowingly) omitted the necessary
information that SA needs to perform meaningful network based tests.
If you want to test SA with network based tests explicitly disabled there
are command line (or configuration) options to achieve that. When you use
those options it causes SA to "shift gears" and changes how various
remaining parts are utilized.
So in a way you are crippling SA by withholding info it needs for network
based tests but not telling it that you are doing that so it doesn't
"know" to bring full force of the non-network components to bear.
I'm not surprised that its performance is sub-par in this situation.
What are you trying to achieve with this artificial scenario?
On Mon, 30 May 2016, Shivram Krishnan wrote:
1) The message is indeed fabricated. I had to generate a RFC 2822 mail from
JSON. I am harvesting SPAM mails from
mailinator.com (public email's). So that is an error in my generation of the
RFC 2822. I did not change it as
spamassassin did not assign a score.
2) I have set a threshold of -10 to see how spamassassin assigns a score for every mail.
On Mon, May 30, 2016 at 8:25 PM, Dave Funk <dbf...@engineering.uiowa.edu> wrote:
That message is either a fabrication or something from a messed up system.
There's no sign of an IP address (neither IPv4 nor IPv6) in it.
There are two identical 'Received:' headers which have '()' where
there should be at least the IP address of the incoming connection.
This indicates that the message has either been tampered with or is from
a postfix system that somebody has
messed up the configuration.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
