Viagra spam mail autolearned as ham, tagged score -1.64

matt matt at cipixia.com
Thu Oct 18 19:06:39 CEST 2012


Hello all.

I just received a 'male enhancement pharmacy' type spam email that amavisd-new (v2.6.6) 
assigned a score of (-1.64).  It is possibly the best designed html spam I've seen, and I 
don't see how Spamassassin could have ever found it.

Considering that Viagra type spam is probably the most prolific and obvious, I find it 
alarming that such a mail could sail through the filters (not to mention be autolearned as 
ham!) in this day and age.

I wish to submit this mail to the list for study, but I'm not sure if that's appropriate 
for this list or if there exists some sort of established "send us your spam mail" outfit 
from Symantec or something like that.

But if anyone would care to see, I uploaded the intact .eml message as saved by 
Thunderbird to my site at
	http://cipixia.com/quack.eml

Is using 'sa-learn --spam' on this messsage all that's required to "unautolearn it" as ham?

Thanks and best regards





More information about the amavis-users mailing list