[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-users
Subject:    Re: spamc report different for the same message (same user)
From:       John Hardin <jhardin () impsec ! org>
Date:       2017-03-10 21:29:46
Message-ID: alpine.LNX.2.00.1703101328480.18838 () athena ! impsec ! org
[Download RAW message or body]

On Fri, 10 Mar 2017, Rejaine Monteiro wrote:

> I'm using spamassassin-3.4.0 in a spam gateway with qmail+simscan and using 
> always same account (qscand) to scan all msgs.
>
> I performed a simple scan in a spam msg, like this:
>
> # spamc -u qscand -R < /tmp/spammsg.eml
>
> and... score are: Content analysis details:   (2.8 points, 5.0 required)
>
> And then, secondly, I performed the same command above, with different 
> results.
>
> Content analysis details:   (5.6 points, 5.0 required)
>
> I noticed that the only difference between the two searches was just the '2.8 
> UNWANTED_LANGUAGE_BODY'. I repeated the command several times, and the 
> results were always vary (2.8 or .5.6 scores).
>
> I have noticed that some scans are 0/0 or below 5.0, but when saving the spam 
> message to a file and executing the spamc on it, it is classified as spam.. I 
> have no idea why this is occurring, but spamassassin works on most often 
> correctly.
>
> Any ideas?

Can you upload the message to someplace like pastebin so that we can look 
at it? Otherwise we're just guessing.


-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Failure to plan ahead on someone else's part does not constitute
   an emergency on my part.                 -- David W. Barts in a.s.r
-----------------------------------------------------------------------
  2 days until Daylight Saving Time begins in U.S. - Spring Forward
[prev in list] [next in list] [prev in thread] [next in thread]