****** Summary ************************************************************************************* 3.800M Bytes scanned 3,984,570 -------- ------------------------------------------------ 326 Clean passed 95.04% 12 Spam blocked 3.50% 5 Spam discarded (not quarantined) 1.46% -------- ------------------------------------------------ 343 Total Messages Scanned 100.00% ======== ================================================ 326 Ham 95.04% 17 Spam 4.96% -------- ------------------------------------------------ 343 Total Messages Scanned 100.00% ======== ================================================ 28 Whitelisted 1 Blacklisted 1 SpamAssassin bypassed 34 Extra code modules loaded at runtime ****** Detailed ************************************************************************************ 12 Spam blocked ---------------------------------------------------------------------------- 9 joe@example.com 4 10.0.0.1 2 bogus@sample.us 1 anyone@sample.us 1 whosyourdaddy@sample.us 2 10.0.0.1 1 bogusfrom@sample.us 1 yuck@sample.us 1 10.0.3.1 1 bogusfrom@sample.us 1 192.168.0.1 1 bogusfrom@example.com 1 192.168.10.10 1 junkman@example.us 3 sam@sample.net 2 10.0.0.1 2 junkman@example.us 1 192.168.10.10 1 junkman@example.us 28 Whitelisted ----------------------------------------------------------------------------- 19 owner-somewhere@example.com 7 someone@sample.net 1 pal@example.com 1 joe@example.org 1 Blacklisted ----------------------------------------------------------------------------- 1 offers@example.us 627 Content types --------------------------------------------------------------------------- 457 text 332 plain 125 html 134 multipart 100 alternative 27 mixed 5 signed 2 related 18 application 12 pdf 3 example.pdf 3 fried.chicken.pdf 3 fax_248531.pdf 1 Doc.pdf 1 invitation.pdf 1 joker.pdf 5 pgp-signature 2 signature.asc 1 ms-tnef 1 winmail.dat 13 image 11 jpeg 7 004.jpg 1 Front2.jpg 1 Sally.Smith.042507.jpg 1 Linda.Jones.03107.JPG 1 WS.LAT_sized.pano.JPG 2 gif 1 D6fW6Ezeco.gif 1 rbgzwy_6.gif 5 message 5 rfc822 255 Bayes probability ----------------------------------------------------------------------- 221 BAYES_00 9 BAYES_50 9 BAYES_99 5 BAYES_20 4 BAYES_40 3 BAYES_60 3 BAYES_80 1 BAYES_05 ================================================================================== Spam Score Percentiles 0% 50% 90% 95% 98% 100% ---------------------------------------------------------------------------------- Score -6.898 -2.524 0.828 4.645 19.005 31.262 ================================================================================== =================================================================================================== SpamAssassin Rule Hits: Spam --------------------------------------------------------------------------------------------------- Rank Hits % Msgs % Spam % Ham Score Rule ---- ---- ------ ------ ----- ----- ---- 1 12 3.50% 70.59% 69.02% 0 DKIM_POLICY_SIGNSOME 2 9 2.62% 52.94% 0.31% 3 RAZOR2_CHECK 3 8 2.33% 47.06% 0.31% 4 BAYES_99 4 8 2.33% 47.06% 0.00% 1.5 RAZOR2_CF_RANGE_E8_51_100 5 8 2.33% 47.06% 0.31% 2 RAZOR2_CF_RANGE_51_100 6 8 2.33% 47.06% 11.66% 0.001 HTML_MESSAGE 7 7 2.04% 41.18% 1.53% 4 DCC_CHECK 8 6 1.75% 35.29% 0.00% 0.001 DIGEST_MULTIPLE 9 6 1.75% 35.29% 0.00% 1.5 URIBL_OB_SURBL 10 5 1.46% 29.41% 5.83% 1.457 MIME_HTML_ONLY 11 5 1.46% 29.41% 0.31% 1.5 RAZOR2_CF_RANGE_E4_51_100 12 5 1.46% 29.41% 38.34% - AWL 13 4 1.17% 23.53% 1.23% 1.396 MIME_QP_LONG_LINE 14 4 1.17% 23.53% 0.31% 0.1 RDNS_NONE 15 4 1.17% 23.53% 0.00% 1.955 URIBL_BLACK 16 3 0.87% 17.65% 0.00% 1.501 URIBL_JP_SURBL 17 3 0.87% 17.65% 0.00% 0.001 STOX_REPLY_TYPE 18 3 0.87% 17.65% 17.79% -0.001 SPF_PASS 19 2 0.58% 11.76% 0.00% 1.5 URIBL_WS_SURBL 20 2 0.58% 11.76% 0.00% 0.739 MPART_ALT_DIFF 21 2 0.58% 11.76% 0.00% 1.561 HTML_IMAGE_ONLY_28 22 2 0.58% 11.76% 0.00% 0.474 URIBL_SC_SURBL 23 2 0.58% 11.76% 0.00% 2.134 TVD_FINGER_02 24 2 0.58% 11.76% 0.00% 0.001 MIME_HTML_MOSTLY 25 2 0.58% 11.76% 0.00% 0.114 HTML_COMMENT_SAVED_URL 26 2 0.58% 11.76% 0.31% 1 BAYES_60 27 1 0.29% 5.88% 0.00% 2.308 FH_HELO_ENDS_DOT 28 1 0.29% 5.88% 0.00% 0.01 T_TVD_FW_GRAPHIC_ID1 29 1 0.29% 5.88% 0.00% 0.961 RCVD_IN_DSBL 30 1 0.29% 5.88% 0.61% -0.001 SPF_HELO_PASS 31 1 0.29% 5.88% 0.00% 0.686 SPF_NEUTRAL 32 1 0.29% 5.88% 0.00% 1.782 FRT_BIGGERMEM1 33 1 0.29% 5.88% 0.00% 3.493 HELO_DYNAMIC_SPLIT_IP 34 1 0.29% 5.88% 0.00% 1.635 PART_CID_STOCK 35 1 0.29% 5.88% 0.00% 0.001 STOCK_IMG_HDR_FROM 36 1 0.29% 5.88% 0.00% 1.627 CTYPE_8SPACE_GIF 37 1 0.29% 5.88% 0.00% 1.439 EMPTY_MESSAGE 38 1 0.29% 5.88% 0.00% 1.39 PLING_QUERY 39 1 0.29% 5.88% 0.00% 0.25 URIBL_GREY 40 1 0.29% 5.88% 0.00% 0.619 RCVD_IN_SORBS_WEB 41 1 0.29% 5.88% 0.31% 0.001 HS_INDEX_PARAM 42 1 0.29% 5.88% 0.00% 0.001 STOCK_IMG_HTML 43 1 0.29% 5.88% 0.00% 0.282 DRUGS_ERECTILE 44 1 0.29% 5.88% 0.00% 2.219 TVD_SPACE_RATIO 45 1 0.29% 5.88% 2.45% 0.001 BAYES_50 46 1 0.29% 5.88% 0.00% 0.1 RDNS_DYNAMIC 47 1 0.29% 5.88% 0.61% 3 BAYES_80 48 1 0.29% 5.88% 0.00% 1.526 HTML_IMAGE_ONLY_16 49 1 0.29% 5.88% 0.00% 0.001 HTML_SHORT_LINK_IMG_2 50 1 0.29% 5.88% 0.00% 2.067 RCVD_NUMERIC_HELO 51 1 0.29% 5.88% 0.00% 1.229 DRUGS_ERECTILE_OBFU 52 1 0.29% 5.88% 0.00% 6 AV:Email.Stk.Gen592.Sanesecurity.07071801.pdf 53 1 0.29% 5.88% 0.00% 0.001 NORMAL_HTTP_TO_IP 54 1 0.29% 5.88% 0.00% 1.495 DNS_FROM_RFC_DSN 55 1 0.29% 5.88% 0.00% 1.931 TVD_RCVD_IP 56 1 0.29% 5.88% 0.00% 0.001 BODY_ENHANCEMENT2 57 1 0.29% 5.88% 0.00% 1.803 LONGWORDS 58 1 0.29% 5.88% 0.00% 0.384 PART_CID_STOCK_LESS 59 1 0.29% 5.88% 0.00% 1.652 TT_OBSCURED_VIAGRA 60 1 0.29% 5.88% 0.00% 0.841 SPF_HELO_SOFTFAIL 61 1 0.29% 5.88% 0.00% 1.762 MISSING_SUBJECT 62 1 0.29% 5.88% 0.00% 1.96 RCVD_IN_BL_SPAMCOP_NET 63 1 0.29% 5.88% 0.00% 0.309 BODY_ENHANCEMENT 64 1 0.29% 5.88% 0.00% 1.86 URIBL_AB_SURBL 65 1 0.29% 5.88% 0.00% 0.687 FUZZY_VPILL =================================================================================================== SpamAssassin Rule Hits: Ham --------------------------------------------------------------------------------------------------- Rank Hits % Msgs % Spam % Ham Score Rule ---- ---- ------ ------ ----- ----- ---- 1 225 65.60% 70.59% 69.02% 0 DKIM_POLICY_SIGNSOME 2 221 64.43% 0.00% 67.79% -2.599 BAYES_00 3 125 36.44% 29.41% 38.34% - AWL 4 58 16.91% 17.65% 17.79% -0.001 SPF_PASS 5 38 11.08% 47.06% 11.66% 0.001 HTML_MESSAGE 6 26 7.58% 0.00% 7.98% 1.399 FROM_LOCAL_HEX 7 19 5.54% 29.41% 5.83% 1.457 MIME_HTML_ONLY 8 18 5.25% 0.00% 5.52% 0.001 DKIM_SIGNED 9 18 5.25% 0.00% 5.52% -1.3 DKIM_VERIFIED 10 14 4.08% 0.00% 4.29% 0.478 WHOIS_DMNBYPROXY 11 9 2.62% 0.00% 2.76% 0.001 WEIRD_PORT 12 8 2.33% 0.00% 2.45% 0.001 DRUGS_MUSCLE 13 8 2.33% 5.88% 2.45% 0.001 BAYES_50 14 7 2.04% 0.00% 2.15% 1.62 URI_NOVOWEL 15 5 1.46% 0.00% 1.53% 1.292 MISSING_HEADERS 16 5 1.46% 41.18% 1.53% 4 DCC_CHECK 17 5 1.46% 0.00% 1.53% -0.74 BAYES_20 18 4 1.17% 23.53% 1.23% 1.396 MIME_QP_LONG_LINE 19 4 1.17% 0.00% 1.23% -0.185 BAYES_40 20 3 0.87% 0.00% 0.92% 3.496 AXB_XMID_1212 21 3 0.87% 0.00% 0.92% 1.643 RCVD_IN_NJABL_PROXY 22 2 0.58% 5.88% 0.61% -0.001 SPF_HELO_PASS 23 2 0.58% 0.00% 0.61% 0.001 HTML_FONT_SIZE_LARGE 24 2 0.58% 0.00% 0.61% 1.083 URIBL_RHS_DOB 25 2 0.58% 0.00% 0.61% 1.15 FORGED_MUA_THEBAT_CS 26 2 0.58% 5.88% 0.61% 3 BAYES_80 27 1 0.29% 0.00% 0.31% 0.001 SPF_HELO_FAIL 28 1 0.29% 0.00% 0.31% 1 EXTRA_MPART_TYPE 29 1 0.29% 0.00% 0.31% 0.156 SUBJECT_FUZZY_TION 30 1 0.29% 0.00% 0.31% 0.693 SPF_FAIL 31 1 0.29% 0.00% 0.31% 2.912 SUSPICIOUS_RECIPS 32 1 0.29% 29.41% 0.31% 1.5 RAZOR2_CF_RANGE_E4_51_100 33 1 0.29% 52.94% 0.31% 3 RAZOR2_CHECK 34 1 0.29% 0.00% 0.31% 2.622 SUBJ_YOUR_DEBT 35 1 0.29% 5.88% 0.31% 0.001 HS_INDEX_PARAM 36 1 0.29% 47.06% 0.31% 2 RAZOR2_CF_RANGE_51_100 37 1 0.29% 47.06% 0.31% 4 BAYES_99 38 1 0.29% 0.00% 0.31% 1.501 WHOIS_PRIVPROT 39 1 0.29% 0.00% 0.31% -1.11 BAYES_05 40 1 0.29% 0.00% 0.31% 0.001 HTML_IMAGE_RATIO_06 41 1 0.29% 11.76% 0.31% 1 BAYES_60 42 1 0.29% 23.53% 0.31% 0.1 RDNS_NONE =================================================================================================== =================================================================================================================== Timing Percentiles % Time Total (s) 0% 10% 25% 50% 75% 90% 100% ------------------------------------------------------------------------------------------------------------------- AV-scan-2 42.85% 1695.306 2.755 2.770 2.804 3.019 4.736 10.268 28.351 SA check 38.18% 1510.367 1.338 2.577 3.000 3.867 6.039 9.587 81.674 AV-scan-1 10.79% 426.822 0.007 0.021 0.041 0.132 0.494 2.458 98.903 mime_decode 1.00% 39.454 0.014 0.018 0.021 0.030 0.058 0.128 4.035 SMTP greeting 0.82% 32.604 0.005 0.005 0.005 0.005 0.006 0.083 3.115 SA parse 0.81% 31.977 0.006 0.008 0.010 0.012 0.039 0.298 2.034 get-file-type1 0.71% 27.912 0.085 0.095 0.097 0.098 0.106 0.135 0.566 fwd-end-chkpnt 0.59% 23.305 0.007 0.010 0.011 0.015 0.025 0.070 5.511 fwd-connect 0.54% 21.502 0.012 0.015 0.016 0.032 0.034 0.104 1.822 main_log_entry 0.52% 20.378 0.018 0.020 0.021 0.023 0.040 0.082 1.979 update_cache 0.45% 17.726 0.003 0.004 0.014 0.016 0.025 0.090 4.663 SMTP DATA 0.36% 14.358 0.002 0.026 0.028 0.033 0.066 0.072 0.141 get-file-type2 0.36% 14.310 0.089 0.092 0.096 0.098 0.115 0.167 4.485 spam-wb-list 0.31% 12.316 0.005 0.005 0.005 0.005 0.007 0.103 0.963 SMTP pre-DATA-flush 0.31% 12.083 0.005 0.005 0.005 0.006 0.008 0.023 0.907 fwd-mail-pip 0.24% 9.512 0.003 0.004 0.006 0.018 0.035 0.058 0.389 decompose_part 0.13% 5.268 0.001 0.002 0.002 0.002 0.003 0.019 0.353 check_header 0.10% 3.774 0.003 0.004 0.005 0.006 0.007 0.018 0.283 gen_mail_id 0.09% 3.647 0.001 0.001 0.002 0.002 0.002 0.014 0.213 check_init 0.09% 3.543 0.002 0.002 0.002 0.002 0.003 0.004 0.288 write-header 0.08% 3.168 0.002 0.002 0.002 0.004 0.004 0.005 1.716 prepare-dsn 0.08% 3.045 0.002 0.002 0.002 0.002 0.002 0.005 0.365 digest_hdr 0.07% 2.793 0.001 0.001 0.001 0.002 0.002 0.003 0.168 update_snmp 0.06% 2.558 0.004 0.004 0.004 0.004 0.005 0.011 0.164 decide_mail_destiny 0.06% 2.263 0.002 0.003 0.003 0.003 0.004 0.007 0.259 SMTP LHLO 0.05% 2.052 0.001 0.001 0.001 0.001 0.001 0.002 0.182 create email.txt 0.04% 1.489 0.001 0.001 0.001 0.128 0.142 0.163 0.210 SMTP pre-MAIL 0.03% 1.368 0.000 0.001 0.002 0.002 0.002 0.002 0.077 open-mbx 0.03% 1.346 0.065 0.108 0.157 0.187 0.248 0.276 0.284 rundown 0.03% 1.226 0.001 0.001 0.001 0.001 0.001 0.002 0.119 get-file-type4 0.03% 1.214 0.106 0.107 0.107 0.108 0.110 0.120 0.122 mkdir tempdir 0.02% 0.964 0.001 0.001 0.001 0.090 0.090 0.090 0.123 unlink-1-files 0.02% 0.916 0.001 0.001 0.001 0.001 0.001 0.001 0.239 fwd-data-contents 0.02% 0.855 0.000 0.000 0.000 0.000 0.000 0.001 0.103 digest_body 0.02% 0.787 0.000 0.000 0.000 0.000 0.000 0.002 0.072 SMTP pre-response 0.01% 0.590 0.001 0.001 0.001 0.001 0.001 0.001 0.060 get-file-type3 0.01% 0.581 0.102 0.104 0.106 0.106 0.126 0.135 0.141 fwd-rcpt-pip 0.01% 0.569 0.001 0.001 0.001 0.001 0.001 0.001 0.043 SMTP response 0.01% 0.553 0.001 0.001 0.001 0.001 0.002 0.002 0.048 mkdir parts 0.01% 0.539 0.001 0.001 0.001 0.040 0.048 0.065 0.090 get-file-type8 0.01% 0.266 0.119 0.122 0.126 0.133 0.140 0.144 0.147 unlink-2-files 0.01% 0.248 0.001 0.001 0.001 0.001 0.001 0.002 0.064 get-file-type5 0.00% 0.184 0.184 0.184 0.184 0.184 0.184 0.184 0.184 ren0-unl0-files0 0.00% 0.151 0.151 0.151 0.151 0.151 0.151 0.151 0.151 get-file-type6 0.00% 0.119 0.119 0.119 0.119 0.119 0.119 0.119 0.119 fwd-data-chkpnt 0.00% 0.047 0.000 0.000 0.000 0.000 0.000 0.000 0.047 parts_decode 0.00% 0.039 0.000 0.000 0.000 0.000 0.000 0.000 0.011 unlink-8-files 0.00% 0.036 0.003 0.006 0.011 0.018 0.025 0.030 0.033 unlink-4-files 0.00% 0.017 0.001 0.001 0.001 0.001 0.002 0.002 0.003 save-to-local-mailbox 0.00% 0.015 0.000 0.001 0.001 0.001 0.001 0.005 0.010 unlink-3-files 0.00% 0.005 0.001 0.001 0.001 0.001 0.001 0.001 0.001 unlink-6-files 0.00% 0.001 0.001 0.001 0.001 0.001 0.001 0.001 0.001 unlink-5-files 0.00% 0.001 0.001 0.001 0.001 0.001 0.001 0.001 0.001 =================================================================================================================== Total Time 100.00% 3956.169