Есть, например, такой вот спам:
Return-Path: <adolphusgenerosity@brasilinspired.com>
From: "Free Sample enlargement" <adolphusgenerosity@brasilinspired.com>
To: <***@***.com>
Subject: --===SPAM===-- Become a female mag sex fantasy
Date: Tue, 4 Oct 2011 18:18:48 +0400
Message-ID: <004201cc8279$bde2c1b0$39a84510$@com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_00C2_01CC82A5.1885AC10"
X-Mailer: Microsoft Office Outlook 12.0
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on ***.***.com
X-Spam-Flag: NO
X-Spam-Status: NO, hits=-1.50 required=5.00
X-Spam-Report: * 10 BAYES_99 BODY: Bayes spam probability is 99 to 100%
* [score: 0.9976]
* 0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1
* 1.0 HK_NAME_FREE From name mentions free stuff
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.6 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
* [URIs: potiongrow.com]
* 1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
* [URIs: potiongrow.com]
* 0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
* [117.201.44.250 listed in dnsbl.sorbs.net]
* 1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
* [117.201.44.250 listed in bb.barracudacentral.org]
* -5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at http://www.dnswl.org/, high
* trust
* [117.201.44.250 listed in list.dnswl.org]
* 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
* 1.0 HELO_NO_DOMAIN Relay reports its domain incorrectly
Непонятно, с чего вдруг в итоге получается hits=-1.50 и NO, когда сумма оценок явно больше порогового значения.