[Gllug] Forwarded Spam message which SA missed [Fwd: Hey bro, found this site]

[Nix]

On Sat, 14 Jan 2006, John Winters moaned:
> 
> From: "Alberto Simmons" <cecilia.fabbri at baachfamily.com>
> Subject: Hey bro, found this site
> To: <john at sinodun.org.uk>
> Date: Fri Jan 13 15:15:33 2006 -0000
> Envelope-to: john at sinodun.org.uk
> Delivery-date: Fri, 13 Jan 2006 15:16:08 +0000
> Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C6187E.9E743680"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2900.2180
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> X-Spam-Level: ***

> X-Spam-Status: No, score=3.8 required=5.0 tests=BAYES_99,HTML_20_30,
> HTML_MESSAGE, MIME_QP_LONG_LINE, SEE_FOR_YOURSELF autolearn=no
> version=3.0.3

Well, first this mail has *no* Received headers. Is this a pristine
message, or not?

I can't see anything really wrong there, except that the really low
BAYES_99 score continues to torpedo you. This is fixed in 3.2-to-be,
but for now try this:

score BAYES_95 0 0 3.514 3.705
score BAYES_99 0 0 4.070 3.914

If that's still not good enough, you can feed a failing message through
`spamassassin -D' and I'll have a look at that.

-- 
`Logic and human nature don't seem to mix very well,
 unfortunately.' --- Velvet Wood
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug