CHRISTOPHER TATRO wrote:
> I just finished setting up FuzzyOcr and sent a spam
we have been
> receiving a lot of, containing a picture which scored a
"9" in the
> FuzzOcr.log.
> I realize that only a 1 is displayed in maia when the
FuzzyOcr score is
> matched; however, I have maia set to quarantine
anything above a 5. Why
> isn't this particular spam getting put in my
quarantine? Under unconfirmed
> Non-spam the message score is: 4.729, just sneaking
through. Any guidance
> would be appreciated.
It's possible that you have some negative-scoring rules
reducing the
total score below your threshold. BAYES_00 is frequently
triggered by
these image spams, and if you've been receiving a lot of
these image
spams from the same sender addresses lately you may also be
seeing
negative score adjustments from the AWL rule, particularly
if these
messages have been auto-learned as non-spam in the past.
In any case, the way to test this is to run spamassassin
manually on the
email in question. Cut and paste the raw email from Maia's
mail viewer
(the "raw", undecoded view that shows all the
headers) into a file (say,
email.txt), then run:
spamassassin -t < email.txt
That should reveal the full list of triggered rules and
their individual
score contributions. Note: run this as your amavis/maia
user, not as root.
--
Robert LeBlanc <rjl renaissoft.com>
Renaissoft, Inc.
Maia Mailguard <http://www.maiamail
guard.com/>
_______________________________________________
Maia-users mailing list
Maia-users renaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users
|