From: Hill, B. <bre...@nl...> - 2012-12-20 13:07:30
|
Three "identical" emails come in within a time span of 2 seconds from the same sending server to three different addresses. Only the first one gets a Bayesian score of 40. The other two get no Bayesian score. The second email gets a "Questionable reputation" score of 8 and nothing else. The third gets no score at all. Why is this? Here's the log for them: Dec-20-12 07:23:04 id-35600-19031 [VIRUS] 75.75.244.36 <mo...@du...> to: us...@my... ClamAV: scanned 4865 bytes in message - OK ; Dec-20-12 07:23:05 id-35600-19031 75.75.244.36 <mo...@du...> to: us...@my... Bayesian Check [scoring:40] - Prob: 1.00000 / Confidence: 0.00000 => doubtful.spam; Dec-20-12 07:23:05 id-35600-19031 75.75.244.36 <mo...@du...> to: us...@my... Message-Score: added 40 for Bayesian Probability: 1.00000, total score for this message is now 40; Dec-20-12 07:23:05 id-35600-19031 [MessageScore] 75.75.244.36 <mo...@du...> to: us...@my... [spam found] and passing because messagescore(40) is in warning range ( 39 - 49) -- [Fast 2 min approval application for extra funds] -> discarded/id-35600-19031.eml; Dec-20-12 07:23:05 id-35600-19032 75.75.244.36 <mo...@du...> to: us...@my... Message-Score: added 8 for Questionable Reputation for 75.75.244.36, total score for this message is now 8; Dec-20-12 07:23:05 id-35600-19032 [VIRUS] 75.75.244.36 <mo...@du...> to: us...@my... ClamAV: scanned 4873 bytes in message - OK ; Dec-20-12 07:23:05 id-35600-19032 [MessageOK] 75.75.244.36 <mo...@du...> to: us...@my... message ok [Fast 2 min approval application for extra funds] -> okmail/Fast_2_min_approval_applicatio__678.eml; Dec-20-12 07:23:06 id-35600-19034 [VIRUS] 75.75.244.36 <mo...@du...> to: us...@my... ClamAV: scanned 4873 bytes in message - OK ; Dec-20-12 07:23:06 id-35600-19034 [MessageOK] 75.75.244.36 <mo...@du...> to: us...@my... message ok [Fast 2 min approval application for extra funds] -> okmail/Fast_2_min_approval_applicatio__678.eml; Thanks, Brett |