PDA

View Full Version : SpamAssassin being fooled???



upss
03-01-2004, 12:04 PM
Can anyone explain why an email like this is NOT being flagged as SPAM and what can be done about it?

This is an exact copy of a Message Source. It does exceed the Hit threshold but is not flagged. Most email DO get flagged, it is only certain one that somehow bypass the SpamAssassin.

Thanks for any help.


Message Source

Return-Path: <eleassa@st-davids.net>
Received: from embajadadelperu.org.ec (embajadadelperu.org.ec [63.84.236.146])
by upss.com (8.11.6/8.11.6) with SMTP id i21INnu05502
for <upss@upss.com>; Mon, 1 Mar 2004 11:23:51 -0700
To: upss@upss.com
Subject: grow "Date Number"0614457
From: eleassa@st-davids.net
Reply-to: eleassa@st-davids.net
X-Mailer: PHP/4.1.2
Date: Mon, 26 Jan 2004 00:24:48 -0500 (EST)
Message-ID: &lt;555096468879127.59LWXKBUTC@hotmail.com>
Content-Type: text/plain
X-Spam-Status: No, hits=-4.8 required=4.3
tests=BAYES_01,DATE_IN_PAST_96_XX,NO_REAL_NAME
version=2.52
X-Spam-Level:
X-Spam-Checker-Version: SpamAssassin 2.52 (1.174.2.8-2003-03-24-exp)
X-UIDL: 6om!!GS&lt;!!?A4!!pj@!!


drop the hammer on the next girl you screw...

http://emarkdinbs.com/vp5

jalal
03-01-2004, 01:14 PM
Thats a -4.8 (negative number) so its way below the spam threshold.

upss
03-01-2004, 01:51 PM
This may be the problem. I don't think there is such a thing as a "negative" value Hit. I have looked at hundreds of Spams, they all have positive value except these obvious Spams that somehow bypass the SpamAssassin.

jalal
03-01-2004, 06:06 PM
Scores can have negative values.

upss
03-02-2004, 12:32 PM
Where do you get this information?

jalal
03-02-2004, 02:29 PM
spamassassin.org.

And looking through the existing score files.

for example, whitelist addresses simply get a massive negative score like -100