> likely be worse than the ailment. If a spammer really wanted to get around
> spamassasin they would download it and simply tailor the messages so that
> the only thing that gets tagged are the false headers and avoid scoring
any
> points for text in the body. This would get through most default configs
and
> be much more efficient than blowing their most limited resource,
bandwidth.
http://www.samthecomputerman.com/email.txt
Looks like they already did :)
I just installed version 2.31 of SA today, and it still doesn't trigger it
for that spam:
X-Spam-Status: No, hits=3.3 required=5.0
tests=FROM_NAME_NO_SPACES,PLING,MONEY_BACK,PORN_14,
DATE_IN_PAST_06_12
version=2.31
I guess they're wording stuff more carefully now. But I think 1 spam out of
800 (samthecomputerman.com/sys) is an acceptable false negative. Of course,
I didn't tweak the settings at all...it's out-of-the-box scoring.
-Sam
