[vps-mail] Who does SA behave like this?

["Brian Haines" <providertalk@xxxxxxxxxxxxxxxx>]

On only one of my VPSv2 accounts SA  filters a bunch of spam just fine into
the Junk mail folder and still delivers a bunch into the Inbox. The later
includes an email like below with the original message as an attachment. The
points indicated are obviously high enough to triger SA? 

Any ideas?

Thanks,
Brian Haines


Spam detection software, running on the system "<myserver>", has identified
this incoming email as possible spam.  The original message has been
attached to this so you can view it (if it isn't spam) or label similar
future email.  If you have any questions, see The administrator of that
system for details.

Content preview:  Discover what millions worldwide have already: The
Fountain
   of Youth today! *Eliminate all body fat *Increase libido and sex drive
[...]
   

Content analysis details:   (13.9 points, 5.0 required)

 pts rule name              description
---- ----------------------
--------------------------------------------------
 3.8 HELO_DYNAMIC_IPADDR2   Relay HELO'd using suspicious hostname (IP addr
                            2)
 4.1 HELO_DYNAMIC_HCC       Relay HELO'd using suspicious hostname (HCC)
 0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay
lines
 0.0 HTML_MESSAGE           BODY: HTML included in message
 3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
 0.0 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
 0.2 HTML_TITLE_EMPTY       BODY: HTML title contains no text
 0.2 DNS_FROM_RFC_ABUSE     RBL: Envelope sender in abuse.rfc-ignorant.org
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
address
                            [201.222.155.36 listed in dnsbl.sorbs.net]

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus, or
confirm that your address can receive spam.  If you wish to view it, it may
be safer to save it to a file and open it with an editor.


========================================================================
This is <vps-mail@xxxxxxxxxxxxx>  <http://groupmail.org/lists/vps-mail/>
Before posting a question, please search the archives (see above URL).