[WBEL-users] Re: SpamAssassin without Razor

[Mike Staver]

Yes, I've been using spamassassin without issue for over 2 years now. 
However as I said, apparently somebody figured out how to get around it. 
  Here is some header examples of spam that slipped by it:

X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on mail.fimble.com
X-Spam-Level: **
X-Spam-Status: No, hits=2.9 required=3.5 
tests=HTML_40_50,HTML_IMAGE_ONLY_04,
	HTML_MESSAGE,MIME_HTML_ONLY,PRIORITY_NO_NAME autolearn=no version=2.64

X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on mail.fimble.com
X-Spam-Level: ***
X-Spam-Status: No, hits=3.1 required=3.5 
tests=HTML_40_50,HTML_IMAGE_ONLY_06,
	HTML_MESSAGE,MIME_HTML_ONLY,PRIORITY_NO_NAME autolearn=no version=2.64

X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on mail.fimble.com
X-Spam-Level: ***
X-Spam-Status: No, hits=3.4 required=3.5 tests=BIZ_TLD,HTML_60_70,
	HTML_FONTCOLOR_RED,HTML_IMAGE_RATIO_14,HTML_MESSAGE,HTML_WEB_BUGS,
	MIME_HTML_NO_CHARSET,MIME_HTML_ONLY,UPPERCASE_25_50,WHY_WAIT
	autolearn=no version=2.64

X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on mail.fimble.com
X-Spam-Level:
X-Spam-Status: No, hits=0.6 required=3.5 tests=HTML_40_50,HTML_MESSAGE,
	MIME_HTML_ONLY autolearn=no version=2.64

So what I'm trying to say is that if you look at the content of the 
spam, almost all the messages I'm getting slipping through are about 
Viagra and are formatted almost exactly the same.  Some spammer figured 
out how to get around SA 2.64 and my guess is that if you haven't 
started to get this kind of spam, you will. I need to figure out how to 
get 3.0 to work on whitebox so I can try that version and see if I get 
any improvement.

Asaf Maruf Ali wrote:
> Hi
> we have a very successful setup running with SpamAssassin 2.64 without Razor 
> using default settings.
> 
> Have you confirmed that spamassassin is working on your system using the 
> sample-spam.txt and sample-nonspam.txt files? 
> 
> Have you modified your procmail file?
> 
> We are using procmail to place number of asterisks equal to the spam rating. 
> Then we use Xamime an email content control application to sort the email 
> into spam and non-spam.
> 
> I can send you a very good document on using spamassassin for individual 
> mailboxes or site-wide deployment.
> 
> Best
> Asaf Maruf
> 
> On Sunday 24 October 2004 11:19, Mike Staver wrote:
> 
>>I've heard about razor and spamassassin working nicely together.
>>However, I'm not sure what razor is exactly or how to implement it. I've
>>noticed that spammers have really got SA's number for version 2.64, and
>>almost 60% of all spam is getting into my inbox as of yesterday even
>>though my threshold is set to 3.5 and I have no custom rules turned on
>>or off, just using defaults.  Is anybody using spamassassin in combo
>>with something else like razor that helps out at all?
>>_______________________________________________
>>Whitebox-users mailing list
>>Whitebox-users@beau.org
>>http://beau.org/mailman/listinfo/whitebox-users
> 
> 

-- 

                                 -Mike Staver
                                  staver@fimble.com
                                  mstaver@globaltaxnetwork.com