The spamassassin portion of the firewall seems to be letting through a small number of messages that are calculated above the threshold set to identify them as spam. Here is an example from my Inbox:
Return-Path:
Received: from larry.flightcraft.ca (larry.flightcraft.ca [1.1.1.1])
by flightcraft.ca (8.9.3/8.9.3) with ESMTP id AAA13184
for ; Sat, 19 Apr 2003 00:33:36 -0700
Received: from [61.174.239.204] (helo=topknitting.com)
by larry.flightcraft.ca with esmtp (Exim 4.10)
id 196mqN-00015n-00
for none@flightcraft.ca; Sat, 19 Apr 2003 00:33:03 -0700
From: "lolita"
Subject: new sweater styles publish-011
To: none@flightcraft.ca
Content-Type: text/html;charset="ISO-8859-1"
Reply-To: lolita@topknitting.com
Date: Sat, 19 Apr 2003 15:37:00 +0800
X-Priority: 3
X-Mailer: FoxMail 3.11 Release [cn]
Message-Id:
X-Do-Spam-Scan: 1
X-Spam-Score: 4.9 (++++)
X-Spam-Flag: NO
X-Spam-Report: SPAM: -------------------- Start SpamAssassin results ----------------------
SPAM: This mail is probably spam. The original message has been altered
SPAM: so you can recognise or block similar unwanted mail in future.
SPAM: See http://spamassassin.org/tag/ for more details.
SPAM:
SPAM: Content analysis details: (4.90 hits, 4.5 required)
SPAM: SPAM_PHRASE_05_08 (1.6 points) BODY: Spam phrases score is 05 to 08 (medium)
SPAM: [score: 5]
SPAM: HTML_FONT_COLOR_MAGENTA (0.4 points) BODY: HTML font color is magenta
SPAM: HTML_WITH_BGCOLOR (0.3 points) BODY: HTML mail with non-white background
SPAM: HTML_FONT_COLOR_RED (0.3 points) BODY: HTML font color is red
SPAM: LINES_OF_YELLING_3 (0.3 points) BODY: 3 WHOLE LINES OF YELLING DETECTED
SPAM: HTML_50_70 (0.3 points) BODY: Message is 50-70% HTML tags
SPAM: LINES_OF_YELLING_2 (0.2 points) BODY: 2 WHOLE LINES OF YELLING DETECTED
SPAM: LINES_OF_YELLING (0.2 points) BODY: A WHOLE LINE OF YELLING DETECTED
SPAM: JAVASCRIPT (0.2 points) BODY: JavaScript code
SPAM: JAVASCRIPT_UNSAFE (0.3 points) BODY: Easily-executed JavaScript code
SPAM: MAILTO_LINK (0.2 points) BODY: Includes a URL link to send an email
SPAM: MAILTO_TO_REMOVE (0.2 points) URI: Includes a 'remove' email address
SPAM: CTYPE_JUST_HTML (0.4 points) HTML-only mail, with no text version
SPAM:
SPAM: -------------------- End of SpamAssassin results ---------------------
X-Scanner: exiscan for exim4 (http://duncanthrax.net/exiscan/) *196mqN-00015n-00*E6dlIy6z8Cs*
Status:
Has anyone already looked into this or seen this problem on teir systems?
This thread was automatically locked due to age.
